rexas-token[.]xyz

The domain rexas-token.xyz has been identified as a phishing site targeting cryptocurrency users, specifically associated with an Angel Drainer. Its malicious activities have been reflected in a VirusTotal score of 15/95 and it has also been noted in multiple blocklists. Such domains are designed to deceive users into revealing sensitive information or transferring assets, posing a notable security risk.

Registered with OwnRegistrar, Inc., this domain is 335 days old and was hosted on an IP address of 192.3.190.186. The associated threat actor behind this phishing attempt has not been clearly traced, but the domain's age suggests a sustained effort to exploit unsuspecting users over time. Additionally, having been listed on three blocklists indicates its malicious nature, as it has been flagged by multiple security services.

Currently, rexas-token.xyz is marked as dead, as it has been successfully taken down by PhishDestroy, which has also reported and blocklisted the domain to prevent further access. Continuous monitoring is advised to ensure that any re-emergence of similar threats is swiftly addressed.