secure-raiffeisen[.]live

This domain secure-raiffeisen.live is classified under credential phishing with an active status confirmed on the report date of July 12, 2026. Infrastructure analysis reveals that the domain resolves to IP address 188.114.96.3, was created on March 06, 2026, and is registered through NiceNIC International Group Co., Limited. The SSL certificate is issued by Let's Encrypt and the observed page title is Just a moment... which is consistent with protective challenge mechanisms often deployed on active sites.

Detection metrics indicate appearance on 2 security blocklists with explicit blocking noted from PhishDestroy and BLP-Malware. VirusTotal records show 6 out of 95 security vendors flagging the domain while AlienVault OTX lists it across 23 threat intelligence pulses. These indicators collectively support the high risk level assigned to the domain which remains operational at the time of analysis.

The precise content served by the domain remains unexamined beyond the recorded page title and no additional brand or kit details are available from the provided intelligence. Uncertainty persists around the exact credential targets or operational duration although the credential phishing classification and continued activity establish a clear threat profile. No visual or functional elements of the site have been documented in the available data.

Defenders should implement immediate blocks for both the domain secure-raiffeisen.live and the resolving IP 188.114.96.3 within network controls and endpoint protection layers. Ongoing monitoring of registrations under NiceNIC International Group Co., Limited combined with cross-referencing against AlienVault OTX pulses can help identify potential related infrastructure. Periodic validation of blocklist status and VirusTotal scores is advised to maintain current awareness of any changes.