stormrae[.]world

This domain, stormrae.world, is identified as a phishing infrastructure designed to harvest user credentials through fraudulent login portals. Visitors to the site are presented with a deceptive interface resembling legitimate authentication pages, where entered usernames, passwords, or other sensitive data are captured by threat actors. The site poses a significant risk of account compromise, financial fraud, or unauthorized access to personal and corporate systems. Analysis indicates stormrae.world was registered on April 15, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to the IP address 188.114.96.3, hosted behind CloudFlare infrastructure in Canada. Security vendors on VirusTotal flagged the domain in 17 out of 95 detections, while it appears on three independent blocklists. The SSL certificate, issued by Let's Encrypt (serial number E7), does not mitigate the malicious intent, as phishing sites commonly use valid certificates to appear legitimate. If you visited stormrae.world or entered credentials on the site, immediate action is required. Disconnect the affected device from networks to prevent further data exfiltration. Reset passwords for all accounts accessed from the device, prioritizing email, financial, and work-related services. Enable multi-factor authentication where available. Scan the device for malware using updated security tools, and monitor accounts for unauthorized activity. Report the incident to relevant security teams or fraud prevention services to aid in tracking the threat infrastructure.