app-web-5605-dj7lzt3so-carmonamarc2-3645s-projects.vercel.app: TrustSniffer assessment: 31/100

Overview

This website is a project deployment on a shared application-hosting platform's subdomain. Its homepage carries the title of a Chrome Web Store listing for the Rabby Wallet crypto-wallet browser extension. It appears intended to present itself as the download or landing point for that wallet. The captured page held a substantial amount of text, but its commercial purpose could not be independently tied to the genuine wallet brand or to any identifiable operator.

Scam/Impersonation Risk

The site carries a confirmed blacklist-level contradiction. External threat-intelligence sources currently flag it as malicious or suspicious, and this is the decisive factor in the assessment. The surrounding signals fit a well-known lure pattern. A disposable, auto-generated hosting subdomain presents the title of a official-looking wallet listing, and that title is not a store or brand domain. Wallet-extension branding is a common bait for credential and seed-phrase theft, and a visitor would have no way to tell this page from the genuine vendor's distribution channel. Sandbox testing of the homepage found no outbound requests, wallet-connection prompts, clipboard manipulation, hidden or external password forms, or cloaking. This is a mitigating observation and not an exoneration, because a lure page can be switched to malicious behaviour later. A large volume of abuse reports exists on a shared infrastructure address belonging to the hosting provider. Those reports are attributed to shared platform tenants and are discounted, so they are not counted against this site. No conflicting legal-entity names were observed. Evidence:

• Homepage: the page title replicates a Chrome Web Store listing for Rabby Wallet while being served from a generic hosting-platform project subdomain, not a store or vendor domain.
• Reputation: external threat-intelligence sources register 1 malicious and 2 suspicious detections against the domain, which establishes the blacklist-level signal.
• Homepage behaviour: 3 of 3 sandbox runs completed with zero external network activity, no wallet-provider interaction, and no password or hidden-form exfiltration.
• Shared infrastructure: 81 abuse reports on a Vercel content-delivery IP, with a zero confidence score and a whitelisted status, are treated as discounted shared-provider noise.

Regulatory Verification Notes

The homepage discloses no regulated-entity status, licence, registered company, or accountable operator, and no independent regulatory source links the site to a licensed business. No third-party broker-reputation match exists. That is neutral context, not a finding. A genuine wallet vendor would normally publish an identifiable organisation and official distribution links. The site's operator therefore cannot be connected to the Rabby brand or to any real-world party. Transport encryption is in place, but it only proves an encrypted channel, not the trustworthiness of the operator. Evidence:

• Homepage: no company name, licence reference, or official-vendor attribution was identified in the captured content.
• Transport security: TLS certificate issued by WR1 at domain-validation (DV) level only, valid to 2026-11-27 (36 days remaining).
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), a mainstream commercial cloud network that does not vouch for the content hosted on it.

What to Verify Next

Anyone who needs the Rabby Wallet should reach the vendor only through the official website address obtained from an independent source, such as its verified social profiles or the genuine Chrome Web Store entry reached directly from the store. They should not follow a link to this page. Any message, advertisement, or search result that led to this address should be treated as suspect and reported to the platform where it appeared. Any organisation with a business interest in the brand should ask the hosting platform to review this deployment for abuse. Confirm the official support and contact channels offline, through the vendor's own verified publications. Evidence:

• Homepage: the store-listing title is served from a hosting-platform project subdomain, so its presence in the browser address bar is the first check to make.
• Reputation: the current threat-intelligence detections should be re-checked after any platform takedown or clean-up.
• Homepage: the page carries no verifiable official-vendor attribution against which its claims could be checked.

Summary Verdict

The website sits in a clearly elevated-risk posture. Active threat-intelligence detections, combined with branding that does not match the hosting address and no demonstrable link to a real operator, outweigh the benign sandbox behaviour and the technically valid transport security. The available evidence does not support treating it as a legitimate distribution point for any wallet software.

Infrastructure Integrity

The site resolves entirely to edge addresses on a major cloud network in the United States, behind a trusted content-delivery and web-application-firewall layer. The origin server was not observable. This infrastructure is a mitigating factor only. It reflects that the platform is reputable, not that the hosted content is, and edge-only visibility makes it harder to verify the hosting independently and allows the content to be swapped rapidly without any visible change in the infrastructure.

Closing Assessment

Passive viewing at most is acceptable, and only from an isolated environment. No wallet software, browser extension, or file should be downloaded from this site, and no seed phrase, private key, password, or payment detail should be entered on it. A user who has already interacted with the page should revoke any wallet approvals, move funds to a freshly created wallet, and change reused passwords.

Signals weighed against the site

• AbuseIPDB: 81 reports on hosting IP 64.29.17.3 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.