accesss-rabbywallet--askk[.]framer[.]media

The domain accesss-rabbywallet--askk.framer.media is a confirmed phishing site engaged in brand impersonation of the Rabby cryptocurrency wallet. This domain posed an elevated risk by attempting to deceive users into believing it was a legitimate Rabby Wallet review or setup page, potentially leading to credential theft or unauthorized access to cryptocurrency funds. The site has been taken offline, but users who interacted with it should take immediate security precautions.

Technical analysis reveals that accesss-rabbywallet--askk.framer.media was flagged by 1 of 95 VirusTotal vendors, including ChainPatrol, and appears on 1 security blocklist (PhishDestroy). The domain was registered through CSC Corporate Domains, Inc. on November 19, 2021, and resolves to IP address 52.223.52.2, hosted in the US on Amazon.com, Inc. infrastructure (AS16509). The SSL certificate was issued by Let's Encrypt / E7, and the page title observed was 'Rabby Wallet Review – Features, Security & Setup'. The site used Framer Sites, React, HSTS, and HTTP/3 technologies, and returned an HTTP 404 status at the time of analysis. Google Safe Browsing did not flag the domain.

Users who visited accesss-rabbywallet--askk.framer.media should treat it as a phishing attempt. Since this is a cryptocurrency-related brand impersonation, victims should immediately revoke any token approvals granted to the site and move all funds to a new, secure wallet. Change passwords for any accounts where credentials may have been entered, enable two-factor authentication, and monitor for fraudulent activity. Report the domain to security blocklists and to Rabby's official support channels to help prevent further abuse.