apexvaultfx[.]com

apexvaultfx.com was registered on May 08, 2026 through the TUCOWS.COM registrar in Colombia. The domain is delegated to Cloudflare’s authoritative name servers lisa.ns.cloudflare.com and pranab.ns.cloudflare.com and resolves to the IP address 188.114.96.3, which belongs to Cloudflare’s global edge network. The infrastructure choice suggests an intent to leverage Cloudflare’s DDoS mitigation and IP masking capabilities. The domain has been added to one public security blocklist and was actively blocked by the PhishDestroy feed, indicating that at least one anti‑phishing service has identified malicious activity associated with the host.

VirusTotal records show that the site was scanned by 91 AV engines, none of which raised a detection; the report explicitly notes that the lack of detections is not evidence of benign behavior. The current status is listed as active, and the risk level remains under investigation. No additional public intelligence such as Safe Browsing alerts, OTX mentions, or SSL certificate anomalies has been observed.

Because the domain is newly created, uses reputable DNS infrastructure, and has already triggered a phishing blocklist, defenders should treat it as a confirmed phishing vector until further evidence disproves the claim. Recommended mitigations include adding apexvaultfx.com to local and network‑level blocklists, monitoring DNS queries for the Cloudflare IP range, and employing URL filtering solutions that reference the PhishDestroy feed. Continuous re‑evaluation is advised as new telemetry becomes available.