m[.]rbcfox[.]com

The domain m.rbcfox.com is currently active and is identified as a credential theft phishing site impersonating RBC. The domain poses a significant risk to users who may inadvertently provide their login credentials, leading to potential unauthorized access and data compromise.

Analysis indicates that m.rbcfox.com has been flagged by 10 of 95 VirusTotal security vendors, suggesting a moderate level of consensus on its malicious intent. The domain appears on 3 security blocklists, further corroborating its threat status. Infrastructure analysis reveals that the domain is currently active, and no specific registrar or IP information is provided in the known intelligence. The domain was created recently, and its trust score is low, indicating a high likelihood of malicious activity. The page title found is 'RBC', which aligns with the brand impersonation tactic.

Given the current active status of m.rbcfox.com and the risk it poses, it is recommended that organizations and individuals block this domain at the network and endpoint levels. Users should be educated to verify the URL and domain of any website requesting RBC login credentials. Additionally, implementing multi-factor authentication (MFA) for RBC accounts can provide an additional layer of security against credential theft attempts.