apexcoretraders[.]com

apexcoretraders.com was observed in threat intel as a generic phishing site. The domain was created on 14 February 2025 and is hosted on the IP address 75.127.1.122, which belongs to AS36352 operated by HostPapa in the United States. The registrar listed is Atak Domain, and the authoritative name servers are dm1.ourdns.site and dm2.ourdns.site. No SSL certificate is presented for the host, indicating that traffic is unencrypted. The page title returned from the live endpoint was “Apexcoretraders”, but the site is currently taken offline, and HTTP status codes are not available for analysis.

Detection data show that three of ninety‑five VirusTotal scanners flagged the domain, and the site appears on a single public blocklist. PhishDestroy has also added the domain to its blocklist, confirming its classification as a phishing vector. The Gridinsoft trust score is 0 out of 100, reinforcing the low credibility of the host. No additional evidence such as malware payloads, credential‑stealing forms, or redirects has been disclosed.

Uncertainty remains regarding the exact phishing campaign details, including the targeted brand or any credential‑capture mechanisms, because the page content has not been captured. Analysts should treat the domain as malicious, block network resolution to 75.127.1.122, and add apexcoretraders.com to local and cloud‑based URL filtering lists. Continuous monitoring of the registrar Atak Domain and the hosting provider HostPapa for new registrations that reuse similar naming patterns is advised. Organizations using email filters should flag any messages that reference “Apexcoretraders” or contain links to this domain, and incident response teams should be prepared to investigate any reported credential submissions that may have originated from this infrastructure.