rabbv[.]io

This domain, rabbv.io, poses a direct threat as a brand impersonation site designed to deceive users of Across Protocol, a cross-chain bridging platform. The site mimics legitimate Across branding to trick visitors into disclosing sensitive information such as wallet credentials, private keys, or other authentication details. Given the elevated risk level, interaction with this domain could result in unauthorized access to cryptocurrency assets or personal data, leading to financial loss or identity compromise. Analysis indicates this domain was registered on February 21, 2026, and is hosted on Cloudflare infrastructure (IP: 172.67.197.201, AS13335). The page title, Grupo Cordfi App Development, does not align with Across Protocol’s official branding, further suggesting malicious intent. At the time of assessment, 10 out of 95 security vendors on VirusTotal flagged rabbv.io as malicious, and it appears on at least one security blocklist. The domain’s SSL certificate (WE1) is non-standard, which may indicate an attempt to bypass basic security checks. If you visited rabbv.io or interacted with its content, immediate action is required. Disconnect any connected wallets or devices from the internet to prevent further data exfiltration. Revoke any active sessions or permissions granted to applications linked to this domain. Scan affected systems using updated security tools to detect potential malware or unauthorized access. Monitor financial accounts and transaction histories for suspicious activity, and report any unauthorized transactions to the relevant platform. Users should also reset credentials for any accounts accessed while the domain was visited, prioritizing accounts associated with cryptocurrency or financial services.