apexinvest-trade[.]us

Analysis of apexinvest-trade.us indicates that the domain is actively associated with an investment‑focused phishing campaign. The domain was registered on 21 February 2026 and resolves to the IPv4 address 176.9.7.179, which is hosted by Hetzner in Germany. VirusTotal records show that three out of ninety‑three scanning engines have flagged the domain as malicious, confirming that at least a subset of security vendors consider it suspicious. The domain is listed on a single public blocklist and has been explicitly blocked by the PhishDestroy filtering service, reinforcing the view that it is being used to deliver fraudulent content.

The scam type documented in the intelligence feed is “Investment Scam”, suggesting that the site attempts to lure victims with promises of high‑return financial products or trading opportunities. The current operational status is offline, indicating that the site is no longer reachable at the time of this assessment. However, the historical presence of the domain on blocklists and its detection by multiple vendors implies that the infrastructure may have been used in recent phishing attempts and could be re‑activated by the threat actor. Uncertainties remain regarding the exact content that was served while the site was live, as no page title or HTTP response details have been provided.

Additionally, the limited number of blocklist entries (one) and the relatively low VirusTotal detection count (three) do not preclude the possibility of broader distribution through other channels that have not yet been observed. Defenders should therefore treat the domain as a high‑confidence indicator of an investment‑related phishing operation. Recommended mitigations include adding the domain and its resolved IP address to outbound and inbound deny lists, updating URL filtering policies to block access to apexinvest‑trade.us, and monitoring DNS traffic for any future resolution attempts.