# rabbyapp.wixstudio.com — SUSPICIOUS

> rabbyapp.wixstudio.com is a Rabby impersonation hosting a crypto drainer, flagged by PhishDestroy. VirusTotal shows 0/95 detections. Do not connect wallets.

## Summary
PhishDestroy identifies rabbyapp.wixstudio.com as an active crypto drainer impersonating Rabby, a popular Web3 wallet interface. This Wix-hosted domain (34.144.206.118) uses a Let’s Encrypt SSL certificate to appear legitimate but is designed to trick users into connecting their wallets and signing malicious transactions that drain crypto assets. The domain was registered under Wix’s registrar and currently shows zero detections across 95 VirusTotal scanners, highlighting how new and undetected this threat remains.


This site specifically mimics Rabby’s branding to deceive users into believing they are on an official platform. Technical indicators include the domain’s recent creation, use of a free SSL certificate, and hosting on a cloud IP (34.144.206.118) commonly associated with short-lived malicious campaigns. The absence of detections on VirusTotal (0/95) suggests it has evaded automated scanning, likely due to its recent deployment and reliance on dynamic infrastructure. WixStudio subdomains are frequently abused for phishing due to their low barrier to entry and legitimate appearance.


If you visited rabbyapp.wixstudio.com, disconnect your wallet immediately and revoke any permissions granted. Do not enter credentials or connect your wallet to this site. Verify Rabby’s official domains (e.g., rabby.io) via trusted sources like PhishDestroy before interacting. Report this domain to PhishDestroy using seed 800c27 to aid in takedown efforts and protect others from this drainer scam.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Rabby

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 34.144.206.118

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/80e0835f-9e77-4b74-8433-7f6707d07e36
- PhishDestroy: https://phishdestroy.io/domain/rabbyapp.wixstudio.com/
- LLM endpoint: https://phishdestroy.io/domain/rabbyapp.wixstudio.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rabbyapp.wixstudio.com/
Last updated: 2026-04-01