apexprimeholdings[.]pro

Apexprimeholdings.pro is a phishing domain involved in brand impersonation targeting Ethereum users, posing an elevated risk. The site was used in a cryptocurrency scam but has since been taken offline. There is no evidence of a drainer kit associated with the domain, but its intent to deceive users by mimicking a well-known brand makes it unsafe.

Technical indicators for apexprimeholdings.pro include detection by 1 of 95 VirusTotal vendors, including Netcraft, and listing on one security blocklist (PhishDestroy). The domain was registered through HOSTINGER operations, UAB on May 24, 2025, and resolves to IP address 198.12.66.123 located in the US under AS36352 HostPapa. It uses an SSL certificate issued by Let’s Encrypt / R13 and operates with technologies such as PHP, Bootstrap, and LiteSpeed. The domain’s nameservers are ns1.dns-parking.com and ns2.dns-parking.com, and it holds a Gridinsoft trust score of 0 out of 100.

Users who encountered apexprimeholdings.pro should consider any credentials submitted compromised and change passwords immediately, enabling two-factor authentication where possible. As this is a cryptocurrency phishing scam impersonating Ethereum, victims should monitor accounts for unauthorized transactions and report suspicious activity to their wallet providers and relevant authorities. The domain’s removal from the web reduces immediate risk but vigilance is advised when dealing with similar brand impersonation phishing scams.