edge-rabbitx-desk[.]pages[.]dev

The domain edge-rabbitx-desk.pages.dev was registered on April 12, 2026 through Cloudflare, Inc. and resolves to the IP address 172.66.44.168, which is hosted by Cloudflare in Canada. The site serves content over HTTPS with a certificate issued by Google Trust Services / WE1, enforces HSTS, and supports HTTP/3. DNS resolution is provided by brianna.ns.cloudflare.com and cosmin.ns.cloudflare.com. The HTTP response code is 200 and the page title returned is "RabbitX: Overview, Features & Troubleshooting Guide". Intelligence flags the domain as a brand impersonation targeting the Rabby brand and categorises the activity as a "Fake Exchange" scam. The domain appears on a single security blocklist and received a Gridinsoft trust score of 0 out of 100. It is currently blocked by PhishDestroy and remains active, with the risk level marked as under investigation. Analysis indicates that the infrastructure is typical of fast‑flux style hosting, leveraging Cloudflare's edge network to obscure origin. The lack of detections on VirusTotal (94 scans) does not imply safety; the domain’s behavior aligns with known impersonation campaigns. Defenders should add the domain and its associated IP to outbound filtering rules, monitor DNS queries for the identified nameservers, and consider full‑packet capture of any client interactions with the site to detect credential harvesting or malicious payload delivery. Ongoing observation is recommended to determine whether additional infrastructure or payloads emerge.