home-wallet-rabby-x[.]pages[.]dev
“Rabby Wallet | Secure Multichain Browser Wallet”
home-wallet-rabby-x.pages.dev — Non verificato. Simulazione del marchio: Aave; Tipo di truffa: Wallet/seed Phishing. Riepilogo delle prove: VirusTotal 13/91 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, ESET); Google Safe Browsing flagged; PhishDestroy score 100/100. Registrar: Cloudflare.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Analysis of the domain home-wallet-rabby-x.pages.dev indicates active brand impersonation targeting Aave, a decentralized finance protocol, under the guise of Rabby Wallet, a multichain browser wallet. The domain, registered on November 8, 2025, through Cloudflare, Inc., resolves to the IP address 172.66.46.224, associated with AS13335 (Cloudflare, Inc.) and located in the United States. Infrastructure analysis reveals the use of Cloudflare nameservers (sue.ns.cloudflare.com and bob.ns.cloudflare.com), alongside technologies such as HSTS and HTTP/3, which are consistent with modern web hosting practices but do not preclude malicious use. The domain is flagged by 17 of 95 security vendors on VirusTotal, and Google Safe Browsing has classified it under SOCIAL_ENGINEERING, corroborating its high-risk status. Additional assessments, including a Gridinsoft trust score of 0/100 and a Scamadviser trust score of 1/100, further support its classification as malicious. The domain appears on at least one security blocklist and is explicitly blocked by PhishDestroy. The page title, 'Rabby Wallet | Secure Multichain Browser Wallet,' aligns with the impersonation of a legitimate cryptocurrency wallet service, though the exact content and functionality of the site remain unanalyzed. Defenders should prioritize blocking this domain at the DNS and network levels, given its active status and confirmed association with cryptocurrency-related fraud. The use of Cloudflare hosting and SSL certification (issued by Google Trust Services) does not mitigate the threat, as these are commonly leveraged by malicious actors to lend credibility. No evidence suggests this domain is part of a broader campaign, but its registration age and ongoing activity warrant continued monitoring for related infrastructure.
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Tecnologie · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confidenza al 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confidenza al 100%Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of home-wallet-rabby-x.pages.dev · checked Mar 2, 2026
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo