apexcryptocurrencytrading[.]com

The domain apexcryptocurrencytrading.com is identified as a brand impersonation threat targeting Coinbase, a well-known cryptocurrency trading platform. This domain was designed to deceive users into believing they were interacting with a legitimate Coinbase service, potentially leading to the theft of personal and financial information.

Infrastructure analysis reveals that the domain has a VirusTotal detection score of 11/95, indicating that 11 out of 95 security vendors flag this domain as malicious. The domain is registered through Atak Domain, a registrar often associated with suspicious activities. The domain resolves to the IP address 192.3.141.251, which is located in the United States and is part of the AS36352 HostPapa network. The domain was created on June 17, 2024, and it does not have an SSL certificate, which is a common indicator of a lack of security. Additionally, the domain appears on one security blocklist and is currently blocked by PhishDestroy.

The domain apexcryptocurrencytrading.com is currently offline, which reduces the immediate risk to users. However, the infrastructure and registration details suggest that the domain may be part of a larger, coordinated campaign. Security researchers recommend monitoring the domain for any future activity and educating users to recognize and avoid such impersonation attempts. Despite the domain being offline, the presence of the domain on security blocklists and the detection score from VirusTotal indicate that the threat should not be underestimated.