drabbybloom[.]com

The domain drabbybloom.com is currently flagged as a high‑risk brand‑impersonation site targeting GoDaddy. Registration data shows the domain was created on 2025‑09‑08 through GoDaddy.com, LLC, and it resolves to the Amazon‑owned address 15.197.148.33 (AS16509, United States). The host runs a typical LAMP stack with WordPress, Plesk, MySQL, PHP and Nginx, and includes client‑side libraries such as Slick, jQuery and jQuery Migrate. The site serves HTTP 200 responses and presents a Let's Encrypt R13 certificate, indicating TLS is active but not tied to the targeted brand. Infrastructure analysis reveals the domain appears on one external blocklist and carries a Gridinsoft trust score of 0 / 100, confirming malicious classification. Two of ninety‑five VirusTotal scanners have flagged the site, and PhishDestroy also blocks it. The page title “DrAbbyBloom.com – Working while caring in the era of longevity” does not reference GoDaddy, suggesting the malicious content is not yet publicly disclosed. The listed scam type is wallet phishing, implying attempts to harvest cryptocurrency credentials or private keys. Defenders should add drabbybloom.com to network‑level deny lists, enforce DNS‑based blocking, and monitor for related C2 traffic from the associated IP. Because the site uses a common web stack, additional heuristic rules targeting similar WordPress‑Plesk deployments may reduce false positives. Continuous re‑scanning is advised to capture any evolving payloads.