rexasfinance-webb[.]pages[.]dev

PhishDestroy is investigating rexasfinance-webb.pages.dev, a domain suspected of generic phishing. While the specific target or brand being impersonated remains unclear at this stage, the domain's structure and hosting raise concerns about potential malicious use. No specific drainer kit association has been identified thus far, but further analysis is ongoing.

Technical indicators for rexasfinance-webb.pages.dev include a VirusTotal score of 1/95, indicating it's currently undetected by most antivirus engines. The domain is registered through Cloudflare, Inc. and resolves to the IP address 172.66.47.125. The SSL certificate is issued by Google Trust Services. The domain's creation date and Google Safe Browsing (GSB) status are currently under investigation, as is any blocklist presence.

The domain is currently active and under investigation. While initial detection rates are low, the potential for phishing necessitates caution. Users are advised to avoid interacting with this domain or providing any personal information. PhishDestroy is actively monitoring the domain and collaborating with security partners to assess the full extent of the threat and implement appropriate response actions. The risk remains under evaluation pending further analysis.