learn-rabby-io[.]wstd[.]io

The domain learn-rabby-io.wstd.io is a confirmed phishing site engaged in brand impersonation targeting Rabby, a cryptocurrency wallet service. It poses an elevated risk as a cryptocurrency scam, designed to deceive users into disclosing wallet credentials or sensitive information under the guise of the legitimate Rabby brand. No drainer kit was identified, but the site has since been taken offline.

Technical analysis reveals learn-rabby-io.wstd.io was flagged by 2 of 95 VirusTotal security vendors, including ChainPatrol and SOCRadar. Google Safe Browsing classified it as 'SOCIAL_ENGINEERING' for phishing, and it appeared on 1 security blocklist (PhishDestroy). The domain was registered through NameCheap, Inc. on February 21, 2026, and resolved to the IP address 104.19.164.34, hosted on Cloudflare's infrastructure in the US. The SSL certificate was issued by Let's Encrypt (E8), and the observed page title was 'Rabby Wallet* | Getting Stated Crypto Wallet Access'. The site returned an HTTP 401 status at the time of assessment.

Users who interacted with learn-rabby-io.wstd.io should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. Change passwords for any accounts accessed via the phishing site and enable two-factor authentication (2FA) where available. Monitor financial and cryptocurrency accounts for unauthorized transactions. Report the domain to the impersonated brand (Rabby) and submit it to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities for further action.