wh-rabbit[.]icu

PhishDestroy identifies wh-rabbit.icu as a brand impersonation threat that poses a significant risk to users, as it attempts to deceive them into revealing sensitive information by masquerading as the legitimate brand Rabby. This domain was flagged due to its malicious intentions, with 2 out of 95 security vendors on VirusTotal detecting it as a potential threat, and it was created on May 09, 2026, through the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED, which further raises concerns about its legitimacy.

The domain wh-rabbit.icu, which resolves to the IP address 172.67.140.230, has been taken offline, but its impact still lingers, and users who may have visited this site should be cautious, as they may have been exposed to malicious content, and it is essential for them to take immediate action to protect themselves, such as changing their passwords and monitoring their accounts for any suspicious activity.

If users have visited wh-rabbit.icu, they should take steps to secure their online presence, including updating their antivirus software, being vigilant for any signs of phishing attempts, and reporting any suspicious activity to the relevant authorities, as this will help prevent further damage and protect others from falling victim to this brand impersonation threat, which has already been found in 1 threat intelligence pulse and appears on 1 security blocklist.