faq-raabbitx-exchange[.]pages[.]dev

Analysis indicates that the domain faq‑rabbitx‑exchange.pages.dev is actively hosting a page titled “RabbitX ® — Complete Guide: Login, Troubleshooting & Account Recovery.” The site resolves to IP 188.114.96.3, which is associated with Cloudflare, Inc. in Canada. TLS termination is provided by a Google Trust Services certificate issued under the WE1 trust anchor, confirming the use of a legitimate certificate authority. HTTP requests return status 200, and the domain is listed on a single security blocklist and has been flagged by PhishDestroy. Registration was performed on 8 April 2026 through Cloudflare’s registrar, using the nameservers algin.ns.cloudflare.com and ingrid.ns.cloudflare.com. The Gridinsoft trust score of 0 / 100 and the classification as a “Fake Exchange” suggest a high likelihood of credential‑stealing intent. No additional intelligence, such as payload analysis or observed victim reports, is currently available. Defenders should consider adding the domain to inbound and outbound filtering rules, monitor DNS queries for the associated IP, and treat any credential submission to the site as compromised. Ongoing observation is advised to detect any escalation or emergence of related infrastructure.