raiffeisen-sache[.]vip

This domain, raiffeisen-sache.vip, is a phishing site designed to harvest banking credentials by impersonating Raiffeisen Bank, a European financial institution. The page likely presents a fraudulent login portal mimicking the bank's official interface, tricking users into entering sensitive account details such as usernames, passwords, and potentially two-factor authentication codes. Analysis of the domain's infrastructure and content patterns suggests it targets customers of Raiffeisen Bank, aiming to facilitate unauthorized account access or financial fraud. Technical evidence confirms the malicious nature of this domain. VirusTotal reports 20 out of 95 security vendors flagging raiffeisen-sache.vip as malicious, indicating broad consensus among detection engines. The domain was registered on April 29, 2026, through NameSilo, LLC, a registrar frequently associated with phishing domains due to its low-cost registration and privacy protection services. It appears on one security blocklist and currently resolves to the IP address 188.114.96.3, hosted on Cloudflare's network (AS13335). Notably, the domain lacks an SSL certificate, a red flag for any site handling sensitive information, as it fails to encrypt user data in transit. Users who visited raiffeisen-sache.vip or entered credentials on the site should assume their banking details have been compromised. Immediately change passwords for the affected bank account and any other services where the same credentials may have been reused. Enable multi-factor authentication (MFA) on all financial accounts if not already active. Monitor bank statements for unauthorized transactions and report any suspicious activity to the financial institution. Consider placing a fraud alert or credit freeze with relevant credit bureaus to prevent identity theft. Additionally, scan local devices for malware, as phishing sites may redirect to exploit kits or distribute malicious payloads.