MALICIOUS — CRITICAL
Pemeriksaan phishing dan keamanan rabbywallets.exchange
rabbywallets[.]
This domain, rabbywallets.exchange, is a confirmed brand impersonation site designed to deceive users of Rabby, a popular cryptocurrency wallet interface.
- VirusTotal
- 7/91
- Blocklists
- 2 · MetaMask, SEAL
- Ketersediaan
- Konten tidak tersedia · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
rabbywallets.exchange — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Rabby; Jenis penipuan: Fake Exchange. Ringkasan bukti: VirusTotal 7/91 (ChainPatrol, alphaMountain.ai, Bfore.Ai PreCrime, CRDF, Forcepoint ThreatSeeker); URLQuery 1 alert; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 85/100. Registrar: Eranet International.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Evidence Analysis
This domain, rabbywallets.exchange, is a confirmed brand impersonation site designed to deceive users of Rabby, a popular cryptocurrency wallet interface. The site mimics the legitimate Rabby branding to trick visitors into entering sensitive wallet credentials or approving malicious transactions, which could result in unauthorized access to crypto assets and direct financial loss. The threat specifically targets users familiar with Rabby’s interface, leveraging visual and functional similarities to lower suspicion during interactions. Analysis indicates the domain was registered on May 27, 2024, through Eranet International Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 162.241.85.94, which has been linked to other fraudulent activities in recent months. The domain is flagged by 7 out of 95 security vendors on VirusTotal, including detections from MetaMask, PhishDestroy, and SEAL blocklists. Additionally, it appears on three independent security blocklists, further confirming its malicious intent. The infrastructure and registration patterns align with known crypto drainer campaigns, where attackers exploit trust in wallet interfaces to siphon funds. If you visited rabbywallets.exchange or interacted with any content from this domain, immediate action is required. First, disconnect any active wallet sessions and revoke all recent transaction approvals through your wallet’s connected apps settings. Scan your device for malware using updated security tools to ensure no persistent threats remain. Monitor your wallet and associated accounts for unauthorized transactions, and consider transferring assets to a new wallet if any suspicious activity is detected. Report the domain to your wallet provider and relevant security communities to help prevent further victimization. Users should also verify the authenticity of any wallet-related sites by cross-checking official domains and enabling multi-factor authentication where available.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Cakupan data12 recorded checks
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | rabbywallets.exchange |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of rabbywallets.exchange · checked Jun 26, 2026
Bukti & Laporan EksternalIndependent lookups and source reports
PD-20260603-C65678 Recipient: support@eranet.com, support@tnet.hk, info@todaynic.com Victim safety and official reportingImmediate actions and verified reporting channels
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.