ai-portal-rabby[.]framer[.]ai

This report analyzes the domain ai-portal-rabby.framer.ai. The site displays a "Site Not Found" page but is flagged as a cryptocurrency scam impersonating the Rabby brand. The primary threat is social engineering, as indicated by Google Safe Browsing which flags the site for SOCIAL_ENGINEERING. The site likely attempts to deceive users into providing sensitive information or performing actions under the false pretense of being associated with the legitimate Rabby platform.

Technical analysis confirms malicious association. VirusTotal reports 6 detections out of 95 vendors. The domain is flagged by ChainPatrol, alphaMountain.ai, CRDF, CyRadar, and Google Safe Browsing. It appears on 1 blocklist. The domain was registered on 2018-01-06 through registrar CSC Corporate Domains, Inc. The IP address is 35.71.142.77, located in the United States, hosted by Amazon.com, Inc. (AS16509). The SSL certificate is issued by Let's Encrypt. Nameservers are ns-114.awsdns-14.com, ns-1198.awsdns-21.org, ns-1902.awsdns-45.co.uk, and ns-635.awsdns.

The domain is currently down or offline, reducing immediate risk. However, the confirmed social engineering threat and impersonation of the Rabby brand pose a moderate risk if the site becomes active again. Users should avoid any interaction with this domain.