# rabbywallet.mataroaccesorios.com.ar — MALICIOUS

> Discover the risks tied to rabbywallet.mataroaccesorios.com.ar, a high-risk domain mimicking Rabby Wallet. Learn about its takedown and safety advice.

## Summary
PhishDestroy has identified rabbywallet.mataroaccesorios.com.ar as a high-risk domain engaging in brand impersonation targeting Rabby Wallet users. The site presented itself as "Rabby Wallet | Your Go-to Wallet for Ethereum and EVM," aiming to deceive visitors into trusting its legitimacy. This domain was crafted to exploit the Rabby brand and potentially capture sensitive information from unsuspecting users.

Technical analysis reveals that the domain was registered on February 21, 2026, and resolved to IP address 167.250.5.65. It appeared on three different security blocklists and was flagged by 11 out of 95 security vendors on VirusTotal, underscoring its malicious nature. The domain leveraged the subdomain "rabbywallet" under matarroaccesorios.com.ar to mimic the official Rabby Wallet branding and lure victims.

Currently, rabbywallet.mataroaccesorios.com.ar is offline, mitigating immediate risks. PhishDestroy recommends continued monitoring of similar domains and urges users to verify URLs carefully before interacting with cryptocurrency wallet services. Organizations should update their blocklists to include this domain and educate users on the dangers of brand impersonation scams to prevent future incidents.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Rabby
- Page title: Rabby Wallet | Your Go-to Wallet for Ethereum and EVM

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 167.250.5.65
- IP Country: AR
- IP City: Buenos Aires
- IP Org: AS264649 NUT HOST SRL
- SSL Issuer: Let's Encrypt / R13

## Detection Status
- VirusTotal: 11 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Lionic", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/01982a2d-c99e-740a-aa30-2e29aee75c68.png
- PhishDestroy: https://phishdestroy.io/domain/rabbywallet.mataroaccesorios.com.ar/
- LLM endpoint: https://phishdestroy.io/domain/rabbywallet.mataroaccesorios.com.ar/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rabbywallet.mataroaccesorios.com.ar/
Last updated: 2026-03-19