# PhishDestroy domain threat record: altexmomentum.click Content language: English Canonical HTML report: https://phishdestroy.io/domain/altexmomentum.click/ Machine-readable companion: https://phishdestroy.io/domain/altexmomentum.click/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-21 02:17:16 UTC - Last availability or vendor check: 2026-10-21 10:34:12 UTC - Stored record updated: 2026-10-21 16:07:58 UTC - VirusTotal detections in the stored snapshot: 17/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: celer ## Stored infrastructure - Observed IP address: 185.62.56.121 - Registrar in stored WHOIS data: Dynadot, LLC - Registrar country in stored WHOIS data: US - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-05-19 05:20:59 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a15c3d-c994-7544-8738-2f355ec955e0/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/altexmomentum.click - Certificate Transparency search: https://crt.sh/?q=%25.altexmomentum.click - Web Archive lookup: https://web.archive.org/web/*/https://altexmomentum.click/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy classifies altexmomentum.click as a suspicious domain based on automated analysis of its content. The domain was first seen by PhishDestroy on 2026-10-21. The recorded page title reads “Altex Momentum | AI Trading Platform | Official Website” and the HTTP response returned code 200 at the time of checking. How the scam works PhishDestroy’s listing relies on multiple vendor detections that label the domain as phishing or malware, but no specific attack vector was observed on the fetched page. Consequently the domain is treated as suspicious without evidence of a particular scam such as credential harvesting, wallet draining, or malicious downloads. Evidence VirusTotal scanned the domain on 2026-10-21 (analysis performed 2026-10-19) and reported 14 malicious and 3 suspicious detections out of 92 engines, for a total of 17 hits. Google Safe Browsing checked the URL on 2026-10-21 and returned no warning. urlscan.io captured the site on 2026-10-21; its engine verdict was malicious with a score of 99, while the overall community verdict was non‑malicious. Cloudflare Radar also flagged the domain as malicious under the “malware” category on 2026-10-21. OTX listed two pulses referencing the domain as of 2026-10-21. PhishDestroy’s internal blocklist marked the domain as suspicious on 2026-10-21, and external blocklists checked (Spamhaus DBL and others) reported no listing. Infrastructure The domain was registered with Dynadot, LLC on 2026-05-19. The recorded hosting address is 185.62.56.121, belonging to the Snel network in the Netherlands. What to do Visitors should avoid entering any credentials, downloading files, or authorising any wallet actions on the site; if credentials were entered, change them immediately and monitor the accounts for unauthorised activity. Defenders should block altexmomentum.click at the network perimeter, inspect access logs for connections to this exact domain, and apply appropriate security policies. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a15c3d-c994-7544-8738-2f355ec955e0/ VirusTotal report: https://www.virustotal.com/gui/domain/altexmomentum.click Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=altexmomentum.click Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-21 02:49:26 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a15c3d-c994-7544-8738-2f355ec955e0.png Captured: 2026-10-21 02:17:16 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a15c3d-c994-7544-8738-2f355ec955e0.png Captured: 2026-10-21 02:17:16 UTC Source report: https://urlscan.io/result/01a15c3d-c994-7544-8738-2f355ec955e0/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/8407059b-0f1b-47f9-a6d6-94f9c1e94948.png Captured: 2026-10-21 02:47:47 UTC Source report: https://radar.cloudflare.com/scan/8407059b-0f1b-47f9-a6d6-94f9c1e94948 SHA-256: f6f9e12d099356fb94b34f3e34e7a3a65c9d9dc72cdfc2641794728db29e64e2 - URLQuery: https://screenshots.phishdestroy.io/uq/d7e4a1ce-22e7-4b3d-ad6d-5277ce1464d0.png Source report: https://urlquery.net/report/d7e4a1ce-22e7-4b3d-ad6d-5277ce1464d0 SHA-256: 0106d63bf1ec3017038be4ede5069637f4a53906e4c3accc5f9204cb292b2e1b - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15c43-629b-70bc-a39e-747d01fbd07f.png Captured: 2026-10-21 02:21:33 UTC Source report: https://urlscan.io/result/01a15c43-629b-70bc-a39e-747d01fbd07f/ SHA-256: 3da11c7510e782d649eefb4fc393696ef5acb57cafa4efdd5343c3103a9d4831 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T02:20:35Z", "uuid": "01a15c3d-c994-7544-8738-2f355ec955e0", "scanned_at": "2026-10-21T02:15:26Z", "final_url": "https://altexmomentum.click/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://altexmomentum.click/", "from": "http://altexmomentum.click/", "status": 307 } ], "ip": "185.62.56.121", "domains": [ "cdn.jsdelivr.net", "challenges.cloudflare.com", "www.cloudflare.com", "fonts.googleapis.com" ], "ips": [ "151.101.1.229", "104.18.95.41", "104.16.123.96", "2a04:4e42:400::485", "185.62.56.121" ], "asns": [ "54113", "13335", "62370" ], "countries": [ "US", "NL" ], "doc_hash": "d0aeb801614e08514d435be33a718a441aebd4eef07d13278055db546a4c3d28", "script_hashes": [ "098867c14f4a4788802ff5865c3576b763c699e02915a22a88fe8c48d7d2043a" ], "globals": [ "toggleTermsPopup", "intlTelInput", "__TS_SITEKEY", "__tsGet", "__tsReset", "__tsNeedsClick", "__tsShow", "__lgBS", "ClientJS", "__visitorCountry", "turnstile" ], "storage_keys": [ "t_cfp" ], "tls": { "san": [ "altexmomentum.click" ], "cipher": "AES_128_GCM", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "altexmomentum.click", "protocol": "TLS 1.3", "valid_to": "2026-12-18T23:59:59Z", "valid_from": "2026-09-19T00:00:00Z" }, "domain_age_days": 154, "apex_age_days": 154, "tls_age_days": 32, "tls_valid_days": 90, "requests": 20, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T02:48:28Z", "uuid": "8407059b-0f1b-47f9-a6d6-94f9c1e94948", "scanned_at": "2026-10-21T02:47:47Z", "final_url": "https://altexmomentum.click/", "status": 200, "history": [ { "url": "https://altexmomentum.click/", "status": 200 } ], "dom_hash": "3f5ddf81840ca9d456ee2904230656a540f7f29b493e83f5a4a379fac73c7689", "doc_hash": "38a84fd29697aba410a67efd917dcf50083715945ce80667a7a1f79d07d3ca19", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "altexmomentum.click", "type": "A", "value": "185.62.56.121" } ], "dnssec_valid": false, "ip": "185.62.56.121", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot, LLC", "created": "2026-05-19T07:20:58Z", "updated": "2026-05-24T07:22:16Z", "expires": "2027-05-19T07:20:58Z", "nameservers": [ "venus.ns.cloudflare.com", "andy.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-21T02:47:31Z", "analysis_at": "2026-10-19T11:00:46Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 14, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "registrar": "DYNADOT LLC", "created": "2026-05-19T07:20:58Z", "expires": "2027-05-19T07:20:58Z", "updated": "2026-05-24T07:22:16Z", "first_seen": "2026-05-19T08:25:29Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "andy.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "andy.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "venus.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "185.62.56.121" } ], "dns_at": "2026-10-19T11:06:02Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "altexmomentum.click" ], "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "serial": "c0d211e6106a3fc8635298f5d03bac3", "sha256": "b95fcb25ad3884228e8ff57ee102af98bd202cec87faee5ae701e3ce1104c264", "subject": "altexmomentum.click", "valid_to": "2026-12-18T23:59:59Z", "valid_from": "2026-09-19T00:00:00Z" }, "whois": { "registrar": "DYNADOT LLC", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-05-19T07:20:58Z", "updated": "2026-05-19T08:01:43Z", "expires": "2027-05-19T07:20:58Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "andy.ns.cloudflare.com", "venus.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-05-19T07:20:58Z", "last changed": "2026-05-19T08:01:43Z", "registration": "2026-05-19T07:20:58Z", "registrar expiration": "2027-05-19T07:20:58Z", "last update of RDAP database": "2026-10-16T07:07:45Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T02:48:44Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "altexmomentum.click" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-21T02:21:11Z", "first": "2026-10-19T12:09:55Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.63, "avg_page_bytes": 11986 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://altexmomentum.click/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "title": "Altex Momentum | AI Trading Platform | Official Website", "robots": "index, follow", "themeColor": "#0a1f0a", "description": "Altex Momentum delivers a premium perspective on AI-driven trading automation, autonomous bots, and cutting-edge operational tooling for contemporary markets.", "canonicalUrl": "https://altexmomentum.click/" }, "trackers": { "requests": 14, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 3 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/intl-tel-input@23/build/js/intlTelInput.min.js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 37, "wait": 45, "connect": 22, "download": 79 }, "response_ms": 185 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "ocsp_stapled": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 41756, "co2_grams": 0.0015, "cleaner_than": 41 }, "dns_server": { "ns": [ { "ip": "108.162.192.235", "host": "venus.ns.cloudflare.com" }, { "ip": "173.245.59.101", "host": "andy.ns.cloudflare.com" } ], "zone": "altexmomentum.click" }, "location": { "ip": "185.62.56.121", "asn": "62370", "org": "Snel.com B.V.", "city": "Rotterdam", "country": "NL" }, "ssl": { "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2", "subject": "altexmomentum.click" }, "dns": { "A": [ "185.62.56.121" ], "NS": [ "venus.ns.cloudflare.com", "andy.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"andy.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416885825, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "185.62.56.121", "family": 4 }, "redirects": { "chain": [ "https://altexmomentum.click" ] }, "tech_stack": { "technologies": [ "Cloudflare Turnstile", "ClientJS", "Priority Hints", "jsDelivr", "Google Font API", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 11 }, "whois": { "registrar": "Dynadot, LLC", "created": "2026-05-19T07:20:58Z", "updated": "2026-05-24T07:22:16Z", "expires": "2027-05-19T07:20:58Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "venus.ns.cloudflare.com", "andy.ns.cloudflare.com" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "referrer-policy": "no-referrer-when-downgrade" } } } } ```