rabbyio[.]tem3[.]io

This domain, rabbyio.tem3.io, is confirmed to be a brand impersonation site targeting the Rabby brand. The domain impersonates the Rabby Wallet, a legitimate Web3 wallet, and poses a high risk of social engineering attacks. Users who visit this site may be tricked into providing sensitive information, such as login credentials or private keys, which can lead to financial loss and identity theft.

Analysis indicates that the domain is flagged by 16 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion. The domain was registered through GoDaddy.com, LLC on August 02, 2024, and resolves to the IP address 188.114.96.3. The SSL certificate is issued by Google Trust Services, which might lend a false sense of security to unsuspecting users. Additionally, the domain has been flagged by Google Safe Browsing for social engineering and appears on at least one security blocklist. The Gridinsoft trust score for this domain is 0 out of 100, indicating a complete lack of trustworthiness.

Users who have visited this site are advised to immediately change any passwords or credentials that may have been entered. They should also monitor their financial accounts and Web3 wallets for any unauthorized transactions. If any suspicious activity is detected, users should contact their respective financial institutions and the Rabby support team for further assistance. It is crucial to avoid visiting unverified domains and to verify the URL and SSL certificate of any website before entering sensitive information.