apexveltro[.]com

The domain apexveltro.com was registered on June 19, 2025 via Atak Domain. It resolves to 198.12.66.123, an IP owned by HostPapa (ASN36352) located in the United States. The site employed a Let’s Encrypt certificate (R13) and presented the title “Apex Veltro Bank- Your New Favorite Bank”, indicating a targeted banking impersonation. Infrastructure analysis shows the domain uses ns1.host-forest.com and ns2.host-forest.com as authoritative nameservers, and the web server delivered content built with PHP, Bootstrap, Smartsupp, jQuery, and HTTP/3.

The domain is currently taken offline, but it was previously listed on at least one security blocklist and is actively blocked by PhishDestroy. A VirusTotal scan recorded a single positive detection out of ninety‑five submitted engines, confirming malicious intent. No additional public threat‑intel feeds such as OTX or Google Safe Browsing entries appear in the supplied data.

The combination of a banking‑related page title, a low‑cost SSL certificate, rapid registration, and the presence on a blocklist strongly suggests the site was created to harvest credentials for a financial institution. Defenders should continue to block the domain and its IP address at perimeter controls, monitor for similar registrations using the same registrar or hosting provider, and add the domain to internal phishing detection rules. Because the site is offline, active probing is not possible, but any future re‑activation should be treated as a high‑confidence phishing indicator.