rabby-wallet-app-eng-us[.]pages[.]dev

The domain rabby-wallet-app-eng-us.pages.dev is assessed as a high-risk brand impersonation threat. This phishing site appears to target users of the Rabby wallet service, potentially leading to the compromise of sensitive information such as login credentials and personal data.

Infrastructure analysis reveals that the domain is registered through Cloudflare, Inc. and was created on October 10, 2025. It resolves to the IP address 188.114.96.3, which is located in California, USA, and is associated with Cloudflare, Inc. VirusTotal indicates that 10 out of 95 security vendors flag this domain as malicious. The domain is currently offline and appears on one security blocklist. Google Safe Browsing has also flagged the site as a phishing threat, and it is blocked by PhishDestroy. The page title displayed when the site was active was 'Suspected phishing site | Cloudflare', further confirming its suspicious nature.

To mitigate the risks associated with this brand impersonation threat, users are advised to verify the authenticity of any communication or website claiming to be from Rabby. This can be done by checking the domain name and comparing it with the official Rabby website. Users should also be cautious of unsolicited emails or messages and avoid clicking on suspicious links. Organizations are recommended to educate their users about the dangers of phishing and to implement multi-factor authentication (MFA) for additional security. Regularly monitoring and updating security configurations can also help in detecting and preventing such threats.