rabbywallet[.]framer[.]wiki

This report details the threat posed by the domain rabbywallet.framer.wiki. Based on the page title "Rabby Wallet - Secure Multi-Chain DeFi Wallet for Web3" and the impersonated brand Rabby, this site is a cryptocurrency scam. The threat it poses is deceiving users into believing they are accessing the legitimate Rabby Wallet platform, likely to steal sensitive credentials or funds through a phishing attack.

Technical evidence confirms the malicious nature of this domain. VirusTotal shows 15 detections out of 95 security vendors, with flags from ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, and Chong Lua Dao. The domain is listed on 1 blocklist. It was created on 2021-11-19, registered through CSC Corporate Domains, Inc., and hosted on IP 52.223.52.2 (US, AS16509 Amazon.com, Inc.). The SSL certificate is issued by Let's Encrypt (E8), and nameservers are ns-1185.awsdns-20.org, ns-1827.awsdns-36.co.uk, ns-423.awsdns-52.com, and ns-772.awsdns.

The current status of rabbywallet.framer.wiki is DOWN/OFFLINE. Due to confirmed impersonation of a legitimate brand and multiple security vendor detections, the risk level is HIGH. Users should avoid any interaction with this domain, even if it becomes accessible again.