rabby[.]net-web[.]app

rabby.net-web.app is a phishing domain that impersonates the Rabby brand. It was detected by PhishDestroy on June 19, 2026, and is flagged as malicious by 2 out of 91 vendors on VirusTotal. The domain is currently offline, but it has been listed on three public blocklists, including those maintained by PhishDestroy, MetaMask, and SEAL.

The domain was registered through Google LLC and hosted on an IP address located in Germany, under the organization AS15169 Google LLC. Despite the absence of an SSL certificate, rabby.net-web.app managed to operate long enough to attract attention and be flagged by multiple security entities. The platform risk score for this domain is 63 out of 100, indicating a significant threat level during its active period.

The use of a reputable registrar like Google LLC and the absence of an SSL certificate suggest a deliberate attempt to bypass certain security checks. Although the domain is now offline, its initial ability to evade detection highlights the importance of early threat identification. PhishDestroy's early detection capabilities play a crucial role in identifying such threats within the critical 24-72 hour window post-registration, before they propagate through antivirus databases. This case underscores the ongoing challenge of combating phishing scams that exploit brand recognition to deceive users.