# rarible-ai.com — SUSPICIOUS

> PhishDestroy warns against rarible-ai.com — a suspicious crypto-draining phishing domain (1 blocklist hit). Verify sites before connecting wallets.

## Summary
PhishDestroy identifies rarible-ai.com as an active crypto-draining phishing domain impersonating Rarible, a popular NFT marketplace.

This domain was flagged by 0 of 95 VirusTotal vendors 16 days after creation on June 25, 2025. It resolves to IP 172.67.179.32 and is already blocked by SEAL and MetaMask. Registered through Gname.com Pte. Ltd., the site remains accessible via a Google Trust Services SSL certificate despite its inclusion on two independent security blocklists.

Current status indicates active distribution with no current detections on VirusTotal engines, suggesting a novel or evasive campaign. Users should avoid interacting with this domain and verify any Rarible-related links using PhishDestroy’s real-time scanner. Blocking at the network perimeter is recommended, along with alerting users to watch for similar impersonation attempts targeting Web3 platforms.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-06-25 09:06:36
- Registrar: Gname.com Pte. Ltd.
- IP: 172.67.179.32

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["SEAL", "MetaMask"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a08e3f4a-2da2-428f-a2fd-e083d8311841
- PhishDestroy: https://phishdestroy.io/domain/rarible-ai.com/
- LLM endpoint: https://phishdestroy.io/domain/rarible-ai.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rarible-ai.com/
Last updated: 2026-03-25