support-rabbitx-exchange[.]pages[.]dev

PhishDestroy identifies support-rabbitx-exchange.pages.dev as a brand impersonation domain impersonating RabbitX Exchange, a cryptocurrency trading platform. The domain is confirmed to host a generic phishing page designed to harvest user credentials or facilitate crypto drainer operations. Analysis of the landing page confirms interface mimicry and malicious input fields intended to capture sensitive authentication data or private wallet keys.

Technical indicators reveal this domain was registered via Cloudflare, Inc., resolving to IP address 188.114.96.3. The SSL certificate is issued by Google Trust Services, which does not indicate malicious intent at the transport layer. As of the latest scan, VirusTotal reports 0 detections out of 95 security engines. Cloudflare Pages hosting suggests infrastructure obfuscation intended to evade detection. Creation date and additional blocklist status remain under verification.

The domain remains active with a status of 'under_investigation.' Immediate actions include network blocking of the IP and domain, and outreach to Google Safe Browsing for blacklist inclusion. Users are advised to avoid interacting with this domain, verify official RabbitX domains via the exchange’s website, and enable multi-factor authentication on all cryptocurrency accounts. Remaining risk is evaluated as moderate due to unflagged status and potential for rapid rebranding under new subdomains.