enrabby-wallet[.]framer[.]media

The domain enrabby-wallet.framer.media is a phishing site engaged in brand impersonation targeting Rabby, a cryptocurrency wallet service. It was designed to deceive users into believing they were interacting with a legitimate Rabby platform, potentially leading to unauthorized access to wallet credentials or funds. As of the latest verification, enrabby-wallet.framer.media has been taken offline, though it previously operated as a cryptocurrency scam.

Technical analysis reveals that enrabby-wallet.framer.media was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and alphaMountain.ai. The domain appears on 1 security blocklist, specifically PhishDestroy. It was registered through CSC Corporate Domains, Inc. on November 19, 2021, and resolved to the IP address 35.71.142.77, hosted on Amazon.com, Inc. infrastructure in the US. The SSL certificate was issued by Let's Encrypt (E7), and the observed page title was 'Site Not Found | Framer' with an HTTP 404 status. Technologies detected include Framer Sites, React, HSTS, and HTTP/3.

Users who may have interacted with enrabby-wallet.framer.media should immediately revoke any token approvals associated with the impersonated Rabby service and transfer funds to a new, secure wallet. Enable two-factor authentication (2FA) on all cryptocurrency accounts and monitor for unauthorized transactions. Report the phishing domain to relevant platforms, such as Google Safe Browsing, PhishTank, or the impersonated brand's official security team, to aid in broader mitigation efforts.