rabbywallet[.]web[.]app

This domain is assessed as a high-risk brand-impersonation operation. Analysis indicates that rabbywallet.web.app presents content designed to resemble a legitimate service while using the page title "Rabby Wallet." The site remains active and resolves to IP address 199.36.158.100. Security monitoring shows that it appears on 3 security blocklists, indicating that multiple independent sources have identified potentially deceptive behavior associated with the domain.

Evidence supporting this assessment includes infrastructure and reputation indicators. The domain was created on June 08, 2026 and was registered through Google Firebase. Certificate data shows a Google Trust Services / WR4 SSL certificate. Reputation telemetry reports that 2 out of 95 security vendors on VirusTotal currently flag the domain. Additional defensive controls have already blocked the domain, further supporting the conclusion that it poses a meaningful risk despite relatively limited antivirus detections.

If a user visited the site, any information entered should be treated as potentially exposed. Recommended actions include changing relevant passwords, reviewing account activity for unauthorized access, enabling multi-factor authentication where available, and monitoring for unexpected messages or transactions. Security teams should block network access to the domain, preserve logs for review, and investigate any connections to the IP address 199.36.158.100. Continued monitoring is advised because the domain is still active.