apextraderltd[.]com

apextraderltd.com was registered on 27 February 2026 through Hello Internet Corp and immediately pointed to the Cloudflare‑owned address 188.114.96.3 (AS13335, United States). The domain resolves to a Cloudflare edge node that hosts the page titled “Apex Trader – Advanced AI Trading Platform”. No TLS certificate was presented during the scan, indicating that the site was served over plain HTTP. Six of ninety‑three VirusTotal scanners flagged the domain as malicious, and it appears on a single security blocklist. The site has been taken offline, and PhishDestroy lists it as a confirmed “Fake Exchange” scam.

The authoritative nameservers are benedict.ns.cloudflare.com and lovisa.ns.cloudflare.com, both belonging to Cloudflare. Gridinsoft assigns a trust score of 1 out of 100, reinforcing the malicious assessment. Although the site is no longer reachable, the infrastructure details remain useful for defenders: the IP 188.114.96.3 should be added to blocklists, and any future domains that resolve to the same Cloudflare edge or use the same nameserver pair should be scrutinized. Continuous monitoring of Cloudflare‑hosted IP ranges for rapid‑deployment phishing campaigns is recommended.

Organizations should update web filtering solutions to deny traffic to apextraderltd.com and any newly observed subdomains that mimic the “Apex Trader” branding. Because the page title explicitly references an AI trading platform, users may be targeted with credential‑harvesting prompts disguised as investment services; security awareness training should highlight this tactic. The current elevated risk rating reflects the combination of a low trust score, multiple vendor detections, and the confirmed fake‑exchange classification. Until the domain is fully retired, defensive teams ought to maintain the block and monitor related indicators of compromise.