rbggames[.]com

PhishDestroy identifies rbggames.com as an active crypto drainer phishing domain with elevated risk. The site is engineered to trick users into connecting crypto wallets and approving malicious token contracts that silently drain funds. Technical analysis confirms this domain (registered April 15, 2026 via Dynadot Inc) resolves to IP 91.218.49.169 and holds a Let's Encrypt SSL certificate. VirusTotal shows only 1 out of 95 security vendors flagged the domain as malicious, indicating poor early detection and high evasion against standard scanners. This domain was flagged by PhishDestroy’s automated pipeline using proprietary behavioral models tuned to detect crypto drainer campaigns. The registrar Dynadot Inc is neutral and not inherently malicious, but allows rapid domain turnover ideal for phishing operations. The IP 91.218.49.169 is associated with prior crypto scam infrastructure and has a low trust score in multiple threat intelligence feeds. The domain age of just days since creation (April 15, 2026) makes it a fresh attack surface with minimal historical reputation. Despite the low VirusTotal detection rate, the behavioral signature—rapid domain registration, crypto-centric lure, and wallet-draining mechanics—meets PhishDestroy’s elevated risk threshold. Users should avoid visiting rbggames.com or any linked crypto giveaway pages. If you already connected a wallet, revoke unauthorized token approvals immediately via tools like revoke.cash and check transaction history for outgoing transfers. Report this domain via PhishDestroy’s browser extension or mobile app to help protect others. Enterprises should block access to 91.218.49.169 at the firewall and monitor DNS logs for queries to rbggames.com. Always verify crypto offers directly on official project websites or verified social channels before interacting.