apexmarketai[.]com

The domain apexmarketai.com was registered through Realtime Register B.V. on May 03 2026 and is currently active. The site presents a page titled “Apex MarketAi – Safe investment with Apex MarketAi” and serves an SSL certificate issued by Let’s Encrypt (R12). The registrar information and recent creation date indicate a deliberately short‑lived operation typical of phishing infrastructure. Technical resolution points to the IPv4 address 198.251.88.6, which belongs to AS53667 (FranTech Solutions) and is geolocated in the United States. The web server responds with HTTP 200 and receives a Gridinsoft trust score of 0 out of 100, reflecting a complete lack of reputation. Nameserver records list ns1.asurahosting.com, ns2.asurahosting.com, ns1.my‑control‑panel.com and ns2.my‑contro, a mix of hosting‑panel and third‑party services often leveraged by malicious operators. Detection footprints show the domain appearing on three security blocklists and being actively blocked by PhishDestroy, MetaMask and SEAL. AlienVault OTX has cited the domain in fourteen separate threat‑intel pulses, and VirusTotal reports a single positive flag out of ninety‑five scanning engines. The combination of multiple independent blocklist listings and a low trust score underscores a high confidence that the site is being used for generic phishing. While the public evidence confirms the domain’s role in a credential‑harvesting campaign, details such as the exact phishing template, target audience and any associated command‑and‑control infrastructure remain unknown. Defenders should add apexmarketai.com to URL filtering and proxy deny lists, monitor DNS queries for the listed nameservers, and enforce TLS inspection to capture any credential submissions. Continuous threat‑intel correlation with the fourteen OTX pulses can aid in early detection of related campaigns.