rabbit[.]auth-in-extranet[.]com

The domain rabbit.auth-in-extranet.com is identified as a high-risk brand impersonation threat, currently marked as offline. It impersonates the brand Rabby, a well-known entity in the cryptocurrency and blockchain space.

Analysis of the domain reveals that it has been flagged by 17 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion and potential threat. The domain is registered through Hello Internet Corp and resolves to the IP address 5.252.153.45. It was created on March 15, 2026, and appears on three security blocklists, including MetaMask, PhishDestroy, and SEAL. The Gridinsoft trust score for this domain is 0 out of 100, reflecting a complete lack of trustworthiness.

The current status of the domain is offline, which suggests that it may have been taken down by the registrar, security organizations, or other interventions. Despite this, the domain poses a high risk and should be treated with caution. Organizations and individuals are advised to block this domain at the network level and ensure that all users are aware of the threat. Regular monitoring of network traffic and security logs is recommended to detect any attempts to revive the domain or related malicious activities. Additionally, users should be educated on the signs of brand impersonation and phishing attacks to prevent potential exposure to this threat.