rabbtix-app[.]pages[.]dev

PhishDestroy identifies rabbtix-app.pages.dev as a generic phishing domain masquerading as RabbitX, the DeFi derivatives exchange on StarkNet. The page title explicitly claims to be 'RabbitX - DeFi Derivatives Exchange on StarkNet,' indicating an attempt to impersonate the legitimate platform. Based on available threat intelligence, this domain employs a generic phishing kit designed to harvest credentials and cryptocurrency wallet connections from unsuspecting users. The fraudulent page leverages Cloudflare’s infrastructure to obscure its origin while presenting a convincing replica of the legitimate RabbitX interface. This domain resolves to IP address 188.114.96.3 and is registered through Cloudflare, Inc. VirusTotal currently shows 0 detections out of 95 scanners, indicating the domain remains under the radar of most automated defenses. The SSL certificate is issued by Google Trust Services, which adds a superficial layer of legitimacy but does not guarantee safety. As of the latest assessment, the domain remains active and has not been flagged by Google Safe Browsing (GSB). Blocklist counts are not specified in available intelligence, but the absence of detections suggests minimal prior scrutiny. As of this report, rabbtix-app.pages.dev is actively hosting a phishing page and poses a high risk to users interacting with DeFi platforms, particularly those unfamiliar with RabbitX’s legitimate domain. Immediate action is recommended: users should avoid accessing this domain and report it to their security teams or browser-based phishing reporting tools. The domain’s low detection rate and use of Cloudflare’s infrastructure make it a persistent threat. While the current risk remains under investigation, users should exercise extreme caution and verify URLs through official RabbitX channels before engaging with any financial transactions.