# rabbyy.pages.dev — SUSPICIOUS

> Beware of rabbyy.pages.dev impersonating Rabby Wallet. This suspicious domain is active and under investigation. Stay informed with PhishDestroy.

## Summary
PhishDestroy identifies rabbyy.pages.dev as a potentially dangerous site impersonating the Rabby brand, putting users at risk of deception and fraud.

This phishing domain mimics the official Rabby Wallet page to trick users into trusting it. Although VirusTotal currently shows no detections, the domain's registration through Cloudflare and its suspicious resemblance indicate ongoing investigation.

If you have visited rabbyy.pages.dev, avoid entering any personal or wallet information. Monitor your accounts for unusual activity and consider changing your credentials immediately to protect your assets.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Target brand: Rabby
- Page title: Rabby Wallet | Your Go-to Wallet for Ethereum and EVM

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.44.63
- Nameservers: sierra.ns.cloudflare.com valentin.ns.cloudflare.com
- SSL Issuer: WE1

## Detection Status
- VirusTotal: 0 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cee43-0f3c-7513-b798-ac163143a45c.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/70d26dd4-4e8e-443d-9233-500da7805832
- PhishDestroy: https://phishdestroy.io/domain/rabbyy.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/rabbyy.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rabbyy.pages.dev/
Last updated: 2026-03-19