rabby[.]framer[.]ai

This report analyzes the domain rabby.framer.ai, which presents itself as "Rabby Wallet | The Best Wallet for Ethereum & EVM" based on its page title. The site is a cryptocurrency scam that impersonates the legitimate Rabby Wallet brand. The primary threat is that it aims to deceive users into believing it is an official wallet interface, potentially leading to the theft of cryptocurrency credentials or funds through fraudulent login or transaction requests.

Technical evidence from the provided data shows the domain has 6 detections out of 95 scans on VirusTotal, flagged by ADMINUSLabs, ChainPatrol, alphaMountain.ai, CyRadar, and Google Safebrowsing. It is listed on 1 blocklist. The domain was registered through CSC Corporate Domains, Inc. and created on 2018-01-06. It resolves to IP address 35.71.142.77, hosted in the United States on AS16509 Amazon.com, Inc. The site uses a Let's Encrypt SSL certificate with identifier E8, and its nameservers are ns-114.awsdns-14.com, ns-1198.awsdns-21.org, ns-1902.awsdns-45.co.uk, and ns-635.awsdns.

The current status of rabby.framer.ai is DOWN/OFFLINE, rendering it inaccessible. Based on the impersonation of a known brand, the low detection rate on VirusTotal, and its presence on blocklists, the risk level is assessed as high for users who may have previously interacted with the site or who encounter it in the future. Immediate action should be taken to avoid any interaction if the site becomes active again.