ra-me[.]com

The domain ra-me.com was a generic phishing site posing no specific brand impersonation or drainer-kit functionality. It operated as a broad credential-harvesting page targeting users through deceptive login prompts. As of the latest verification, ra-me.com has been taken offline, though it previously exhibited elevated risk due to its phishing activity.

Technical indicators confirm ra-me.com was flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft and Trustwave, while Google Safe Browsing did not detect it. The domain appeared on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. Registered through Gname.com Pte. Ltd. on August 19, 2024, it resolved to the IP address 104.21.37.86, hosted on Cloudflare’s network (AS13335) in the US. The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'AME'. Gridinsoft assigned a trust score of 0/100, and detected technologies included Vue.js, HSTS, and Cloudflare services.

Users who interacted with ra-me.com should immediately change any credentials entered on the site, enable two-factor authentication on affected accounts, and monitor for unauthorized access or fraudulent transactions. Report the domain to local cybersecurity authorities or platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader takedown efforts. If financial or cryptocurrency accounts were exposed, review transaction histories for suspicious activity and consider revoking token approvals as a precaution.