apexcopy-ai[.]com

Analysis indicates that apexcopy-ai.com was registered on 2026-02-01 through Ultahost, Inc. The authoritative nameservers ns3-ams.v-sys.org and ns4-ams.v-sys.org resolve the domain to the IPv4 address 213.111.154.185, which is hosted in the Amsterdam data‑center of the Netherlands. The site presents a TLS certificate issued by Let’s Encrypt (R13) and returns an HTTP 302 redirect, suggesting that the landing page may be dynamically changed. The visible page title reads “ApexCopy Ai | CFD Trading — Trading on Stocks, Gold, Oil, Indices”, aligning with the reported investment‑scam classification. Front‑end components identified include Tailwind CSS, Alpine.js, jQuery, Unpkg, Smartsupp, and a YouTube embed, all served through Nginx. Reputation services have flagged the domain: 14 of 91 VirusTotal scanners raise alerts, Gridinsoft assigns a trust score of 0 / 100, and the domain is listed on the PhishDestroy blocklist. The combination of recent registration, low‑reputation scores, and the investment‑oriented page title points to a high‑risk generic phishing campaign targeting users interested in CFD trading. At present, the content of the landing page has not been examined, so the specific lures, credential‑capture forms, or malicious payloads remain unknown. Defenders should add the domain and its hosting IP to outbound allow‑list exclusions, monitor DNS queries for the listed nameservers, and enforce web‑filter rules to block HTTP/HTTPS connections to apexcopy‑ai.com. Continuous threat‑intel feeds should be consulted for any emerging indicators of compromise associated with the same IP range or similar naming patterns.