rss3[.]readles[.]at

The domain rss3.readles.at is currently flagged as a generic phishing site designed to compromise user credentials, likely impersonating a reader or content aggregation service. Analysis confirms its status as active, with infrastructure configured to mimic legitimate platforms while harvesting sensitive account information. Infrastructure analysis reveals the domain resolves to IP address 31.57.29.11, a host with prior associations to malicious activity. The SSL certificate is issued by Let's Encrypt, a common choice among threat actors due to its low-cost and automated issuance process. Security vendors have detected this domain with notable consistency: 19 of 95 engines on VirusTotal classify it as malicious, indicating a high-confidence phishing threat. No legitimate creation date or registrar details are publicly associated with this domain, further reducing its credibility. As of the latest assessment, rss3.readles.at remains active and unresolved. Users are strongly advised to avoid interaction with the domain, including clicking links or entering credentials. Network administrators should implement blocklist updates to prevent access, while security teams are recommended to monitor for related indicators such as the IP address 31.57.29.11 and any subdomains under readles.at. Immediate reporting to relevant abuse contacts and continued vigilance are critical to mitigating this threat.