ramkids[.]gr

The domain ramkids.gr was a generic phishing site posing no specific brand impersonation or crypto-drainer functionality. It operated as a broad credential-harvesting page targeting users through deceptive login prompts before being taken offline. As of the last verification, ramkids.gr is no longer active, but its prior use for phishing warrants caution for anyone who may have interacted with it.

Technical indicators show ramkids.gr was flagged by 1 of 95 VirusTotal security vendors, including CRDF, while Google Safe Browsing did not detect it. The domain appeared on 1 security blocklist (PhishDestroy) and was registered through Pointer.gr on March 05, 2026. It resolved to IP address 185.25.20.72, hosted in Greece under AS209150, and used an SSL certificate issued by Let's Encrypt (R13). The site was built on WordPress with MySQL, PHP, Nginx, and jQuery, and its MX records included mail.ramkids.gr and mail2.ramkids.gr. The observed page title was 'Site Offline,' and Gridinsoft assigned it a trust score of 0/100.

Users who entered credentials on ramkids.gr should immediately change passwords for any accounts accessed through the site, prioritizing email, banking, and social media logins. Enable two-factor authentication (2FA) where available to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized transactions or password reset attempts. Report the phishing domain to the registrar (Pointer.gr) and to local cybercrime authorities or platforms like the Anti-Phishing Working Group (APWG) at reportphishing@apwg.org. If financial data was exposed, contact the relevant institution to secure accounts.