lrab5[.]at

This domain is identified as a credential harvesting phishing site designed to deceive users into submitting sensitive login information. Analysis indicates the infrastructure is engineered to replicate legitimate authentication portals, capturing usernames, passwords, and potentially multi-factor authentication codes. The site employs generic but convincing templates to target a broad range of services, increasing the likelihood of successful compromise for unsuspecting visitors. Infrastructure analysis reveals multiple high-confidence threat indicators. The domain lrab5.at was registered on February 21, 2026, through 101Domain GRS Ltd., an unusual registrar choice for legitimate services. It resolves to the IP address 188.114.97.3 and is currently flagged by 7 out of 95 security vendors on VirusTotal. Additionally, the domain appears on one security blocklist and has been actively blocked by anti-phishing systems. The trust score assigned by independent security analysis is 0 out of 100, further confirming its malicious classification. Users who visited lrab5.at should immediately take corrective actions to mitigate potential compromise. Change all passwords for accounts accessed from the same device or network, especially if credentials were entered on the site. Enable multi-factor authentication where available to add an additional layer of security. Monitor financial and communication accounts for unauthorized activity, as stolen credentials may be used for follow-up attacks. If the site was accessed in a corporate environment, report the incident to internal security teams to prevent lateral movement within the network.