support-rabby-help[.]tem3[.]io

PhishDestroy identifies support-rabby-help.tem3.io as an active crypto drainer impersonating Rabby Wallet’s official support portal. This domain is engineered to trick users into connecting their crypto wallets, enabling silent token and NFT theft via malicious transaction signatures. Vulnerable users risk irreversible asset loss due to the site’s deceptive branding and wallet-interaction prompts. Immediate action is required to prevent exposure to this high-risk fraud.

This domain exhibits multiple red flags validated by independent cybersecurity sources. It was registered on August 02, 2024 through GoDaddy.com, LLC, resolving to IP address 188.114.97.3. Google Safe Browsing classifies it under SOCIAL_ENGINEERING, while 12 out of 95 VirusTotal security vendors flagged it as malicious. Additionally, the domain appears on one known blocklist and is blocked natively by MetaMask, indicating strong consensus across security platforms about its threat potential. The SSL certificate, however, is issued by Google Trust Services, which underscores the need for deeper domain and certificate scrutiny, as threat actors increasingly abuse trusted issuers.

To mitigate the risk posed by this crypto drainer, users must never connect their wallets or enter credentials into this domain. Always verify URLs through PhishDestroy’s real-time scanner before interaction. Use hardware wallets or offline signing for transactions involving large asset values. Report any suspicious domains to wallet vendors and security teams to help block further propagation. Stay vigilant—cryptocurrency drainers often mimic legitimate support channels, and user awareness remains the strongest defense against such attacks.