rxarab[.]com

The domain rxarab.com has been identified as a generic phishing threat, currently taken offline. It posed a risk by potentially tricking visitors into entering sensitive information under false pretenses, such as fake login pages or deceptive forms. The site's title, "GenFF 4 النسخة العربية," suggests it may have targeted Arabic-speaking users with a fraudulent interface designed to harvest credentials or financial data.

Evidence from security scans confirms the danger. VirusTotal flagged the domain with 1 detection out of 95 security vendors, indicating a consensus of malicious intent. The domain was registered on March 15, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, a common registrar for suspicious domains. It appears on one security blocklist and resolves to IP address 2a02:4780:44:2b72:61f2:7dc0:c82e:3eb. The SSL certificate (R10) provided a false sense of security, as phishing sites often use encryption to appear legitimate.

If a user visited rxarab.com, they should immediately change passwords for any accounts entered on the site and enable two-factor authentication. Monitor financial accounts for unauthorized activity and run a full antivirus scan. Report the domain to PhishDestroy for further analysis. PhishDestroy recommends always verifying URLs before entering personal data and using security tools to check site reputation.