apextrx[.]org

The domain apextrx.org is a confirmed phishing site engaged in brand impersonation targeting Revolut users. It presents itself as a legitimate Revolut-related service but is designed to deceive victims into disclosing login credentials or personal information. No crypto drainer kit was identified. The site is currently taken offline, reducing immediate risk, though prior exposure may still pose threats to affected individuals.

Technical analysis shows apextrx.org was flagged by 1 of 95 VirusTotal security vendors, specifically Gridinsoft. The domain appears on 4 security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. It was created on February 21, 2026, and resolves to the IP address 141.136.43.225, hosted by AS47583 (Hostinger International Limited) in the United Kingdom. The SSL certificate is issued by R11, and the observed page title was 'TronDAO | Reserving The Future of TRON Holders', which does not align with the impersonated brand. No registrar information is available for this domain.

Individuals who interacted with apextrx.org should immediately change their Revolut account passwords and enable two-factor authentication (2FA) if not already active. Monitor account activity for unauthorized transactions or signs of fraud. Victims are advised to report the phishing domain to their local cybercrime authorities, Revolut’s security team, and platforms like Google Safe Browsing or PhishTank to aid in broader mitigation efforts.