# rabbyie.pages.dev — SUSPICIOUS

> rabbie.pages.dev mimics Rabby Wallet to steal credentials. Learn how to spot this phishing scam and protect your Ethereum assets now.

## Summary
PhishDestroy identifies rabbyie.pages.dev as an active phishing domain impersonating the legitimate Rabby Wallet, a popular Ethereum and EVM wallet. Even though the risk level is currently low, unsuspecting users may be misled by the site's convincing page title and branding. The danger lies in potential credential theft or unauthorized access to users’ crypto wallets.

This phishing attack operates by mimicking the Rabby brand and presenting a deceptive web page titled "Rabby Wallet | Your Go-to Wallet for Ethereum and EVM." Registered through Cloudflare, Inc., and resolving to IP 172.66.47.178, the domain attempts to appear trustworthy. With one security vendor out of 95 flagging the domain on VirusTotal, it suggests some early detection but not widespread recognition yet. The site likely aims to trick users into entering sensitive login information or seed phrases.

If you have visited rabbyie.pages.dev, it is crucial to avoid entering any personal or wallet credentials. Immediately check your Rabby Wallet for unauthorized activity and consider changing your passwords or seed phrases if you suspect compromise. Use official channels and verified domains when accessing crypto wallets. Reporting this domain to security platforms and staying informed through resources like PhishDestroy can help prevent falling victim to such scams.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Target brand: Rabby
- Page title: Rabby Wallet | Your Go-to Wallet for Ethereum and EVM

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.178
- Nameservers: armando.ns.cloudflare.com kristin.ns.cloudflare.com
- SSL Issuer: WE1

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["Phishing Database"]
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/QvdHgg2V/d16f4eb04294.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/64a4707b-bbdc-465c-bdee-19804775975c
- PhishDestroy: https://phishdestroy.io/domain/rabbyie.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/rabbyie.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rabbyie.pages.dev/
Last updated: 2026-03-19