us-rabbitx-exchange[.]pages[.]dev

This report details a malicious domain, us-rabbitx-exchange.pages.dev, which presented a suspected phishing site page. The page title explicitly identifies it as a suspected phishing site hosted on Cloudflare. The domain impersonates the Rabby cryptocurrency brand, indicating it was designed to deceive users into compromising their cryptocurrency assets. The primary threat is credential theft or cryptocurrency wallet compromise through social engineering.

Technical analysis provides strong evidence of malicious intent. VirusTotal shows 10 out of 95 security vendors flagged this domain as malicious. Google Safe Browsing flagged it for SOCIAL_ENGINEERING. The domain is registered with Cloudflare, Inc. and was created on October 16, 2025. It resolves to IP address 172.66.47.93, located in the United States and assigned to AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1. The domain is currently offline.

The current status of the site is down or offline. The GridinSoft trust score is 0 out of 100, and the overall DOM risk score is 88 out of 100, indicating a very high risk. This domain poses a significant threat to users, particularly those involved with cryptocurrency, due to its impersonation of the Rabby brand and confirmed malicious flags.