# rabby.world — SUSPICIOUS

> Discover the low-risk brand impersonation domain rabby.world targeting Rabby Wallet. Learn about its status and what users should watch for.

## Summary
PhishDestroy identifies rabby.world as a domain involved in brand impersonation targeting the Rabby Wallet, a known Ethereum and EVM-compatible wallet. Although the risk level is assessed as low, brand impersonation remains a concern as it can lead to user confusion, possible credential theft, or unauthorized access to digital assets if the domain were to go live again.

The domain rabby.world was created on March 7, 2026, and currently resolves to the IP address 157.173.208.254. It has been flagged by 1 out of 95 security vendors on VirusTotal and appears on two security blocklists, indicating some suspicion around its activities. However, the domain is presently offline, reducing immediate threat potential. The site’s page title mimics the legitimate Rabby Wallet branding, which could deceive less vigilant users.

Users and organizations should remain cautious by verifying URLs before entering credentials or sensitive information, especially when domains closely resemble trusted brands. Since rabby.world is offline, there is no active threat at this time, but vigilance is advised as such domains can be reactivated. Employing updated security software, browser protections, and checking domain reputations through trusted sources like PhishDestroy will help mitigate the risk of falling victim to brand impersonation scams.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Target brand: Rabby
- Page title: Rabby Wallet | Your Go-to Wallet for Ethereum and EVM

## Domain Intelligence
- Registered: 2026-03-07 13:07:01
- IP: 157.173.208.254
- IP Country: US
- IP City: Boston
- IP Org: AS47583 Hostinger International Limited
- Nameservers: ns1.dns-parking.com ns2.dns-parking.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["ChainPatrol"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc850-d469-771c-baf2-c9ab24f22b19.png
- Wayback Machine: https://web.archive.org/web/https://rabby.world
- PhishDestroy: https://phishdestroy.io/domain/rabby.world/
- LLM endpoint: https://phishdestroy.io/domain/rabby.world/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rabby.world/
Last updated: 2026-03-19