api.rabby[.]ioDomain
Reported by 1 independent source · first reported by Socket · last reported
Last reported 17 days ago
What the reports say
1 report, newest first · the exact sentence from each-
16 Malicious Firefox Extensions Steal Cryptocurrency Wallet Credentials“The clone retains upstream Rabby and DeBank service configuration, including api.rabby[.]io, download.rabby.io, static-assets.rabby.io, static.debank.com, static-assets.debank.com, and matomo.debank.com.”
Indicators reported together
named in the same reports- browserweb[.]comin 1 report
- icy-star-f45c.workers[.]devin 1 report
- fondationanimalaidrelief.workers[.]devin 1 report
- webtools[.]coin 1 report
- tabtools[.]coin 1 report
- fasttools[.]coin 1 report
- protools[.]netin 1 report
- webtools[.]comin 1 report
- neattools[.]comin 1 report
- download.rabby[.]ioin 1 report
- static-assets.rabby[.]ioin 1 report
- static.debank[.]comin 1 report
- static-assets.debank[.]comin 1 report
- matomo.debank[.]comin 1 report
- hxxps://silent-wind-get.icy-star-f45c.workers[.]dev/in 1 report
- silent-wind-get.icy-star-f45c.workers[.]devin 1 report
- hxxps://small-boat-969c.icy-star-f45c.workers[.]dev/in 1 report
- small-boat-969c.icy-star-f45c.workers[.]devin 1 report
- hxxps://green-firefly-ab28.icy-star-f45c.workers[.]dev/in 1 report
- green-firefly-ab28.icy-star-f45c.workers[.]devin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.