# PhishDestroy domain threat record: apexlumentrix.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/apexlumentrix.com/ Machine-readable companion: https://phishdestroy.io/domain/apexlumentrix.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-21 20:43:49 UTC - Last availability or vendor check: 2026-10-22 10:49:32 UTC - Stored record updated: 2026-10-22 16:07:29 UTC - VirusTotal detections in the stored snapshot: 17/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: celer ## Stored infrastructure - Observed IP address: 158.94.210.119 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date (registry RDAP, apexlumentrix.com): 2026-04-21 15:40:31 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1603b-51de-72bf-8cb2-ce4746886aa4/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/apexlumentrix.com - Certificate Transparency search: https://crt.sh/?q=%25.apexlumentrix.com - Web Archive lookup: https://web.archive.org/web/*/https://apexlumentrix.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added apexlumentrix.com to its internal blocklist on 2026-10-21. The recorded page title advertises an "AI‑Powered Trading & Smart Investing Platform". An HTTP 200 response was observed on the same date, but the classification relies on vendor detections rather than observed malicious activity. How the scam works Suspicious domains that present financial or investment services often aim to persuade visitors to disclose credentials, personal data, or payment information. The generic claim of AI‑driven trading can be used to lure users into deposits or account sharing, though no specific mechanism was observed on this site. Evidence VirusTotal recorded 13 malicious and 4 suspicious detections from 92 engines on 2026-10-17, with several vendors labeling the site as phishing. Google Safe Browsing reported no flag on 2026-10-21. urlscan’s engine score marked the URL as malicious (score 92) while its overall verdict was clean. Cloudflare Radar classified the domain as malicious and phishing on 2026-10-21. OTX listed one pulse referencing the domain. PhishDestroy’s internal blocklist includes the domain; external blocklists returned zero hits on the check date. The site redirected from HTTP to HTTPS with a 307 status. Infrastructure The domain was registered on 2026-04-21 through Dynadot Inc. The recorded DNS A record pointed to 158.94.210.119, which was identified as belonging to Omegatech LTD in the Netherlands. The TLS certificate from Let’s Encrypt was valid from 2026-08-31 to 2026-11-29, and no DNSSEC records were present. Open ports observed during scanning were 22, 80 and 443. What to do Visitors should avoid entering any credentials, financial details, or personal information on this site. If any data was submitted, change associated passwords promptly and monitor accounts for unauthorized activity. Defenders should add apexlumentrix.com to blocklists, review logs for connections to 158.94.210.119, and enforce web‑filter policies to block access. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a1603b-51de-72bf-8cb2-ce4746886aa4/ Cloudflare Radar report: https://radar.cloudflare.com/scan/9398eec8-9f7a-40b0-841f-d2b8c248f720 Stored capture screenshot: https://i.ibb.co/SzQ54rC/f00c936b6059.png Cloudflare Radar screenshot (2026-10-21T20:51:35Z): https://screenshots.phishdestroy.io/cf/9398eec8-9f7a-40b0-841f-d2b8c248f720.png URLScan screenshot (2026-07-27T10:30:41Z): https://screenshots.phishdestroy.io/us/019fa320-593b-7569-8e05-9d0f4454601a.png URLScan capture report: https://urlscan.io/result/019fa320-593b-7569-8e05-9d0f4454601a/ URLScan screenshot (2026-07-28T07:50:17Z): https://screenshots.phishdestroy.io/us/019fa7b3-e01e-756d-8a77-eb8c63832042.png URLScan capture report: https://urlscan.io/result/019fa7b3-e01e-756d-8a77-eb8c63832042/ URLScan screenshot (2026-10-21T20:45:20Z): https://screenshots.phishdestroy.io/us/01a16035-dff3-76ab-bd1e-7ba5c9728890.png URLScan capture report: https://urlscan.io/result/01a16035-dff3-76ab-bd1e-7ba5c9728890/ URLScan screenshot (2026-10-21T20:48:02Z): https://screenshots.phishdestroy.io/us/01a16038-7932-75c8-ab8e-8b5664871e54.png URLScan capture report: https://urlscan.io/result/01a16038-7932-75c8-ab8e-8b5664871e54/ VirusTotal report: https://www.virustotal.com/gui/domain/apexlumentrix.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=apexlumentrix.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-21 20:58:49 UTC ## Stored page captures - Primary capture: https://i.ibb.co/SzQ54rC/f00c936b6059.png Captured: 2026-10-21 20:52:11 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a1603b-51de-72bf-8cb2-ce4746886aa4.png Captured: 2026-10-21 20:52:11 UTC Source report: https://urlscan.io/result/01a1603b-51de-72bf-8cb2-ce4746886aa4/ - URLScan capture 2: https://urlscan.io/screenshots/019fa320-593b-7569-8e05-9d0f4454601a.png Captured: 2026-10-21 20:43:49 UTC Source report: https://urlscan.io/result/01a1603b-51de-72bf-8cb2-ce4746886aa4/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/9398eec8-9f7a-40b0-841f-d2b8c248f720.png Captured: 2026-10-21 20:51:35 UTC Source report: https://radar.cloudflare.com/scan/9398eec8-9f7a-40b0-841f-d2b8c248f720 SHA-256: 4ffddeaab55520f9d380ff67685cacbca2358dfcb6979355f1416d3cbcb1da7f - URLQuery: https://screenshots.phishdestroy.io/uq/b940ad6e-119a-4a08-920a-e75fd3757f55.png Source report: https://urlquery.net/report/b940ad6e-119a-4a08-920a-e75fd3757f55 SHA-256: 48ca8310542b7342a76b91e642b351f9f67dafc892ea122d246b9bac09870492 - URLScan · 2026-07-27: https://screenshots.phishdestroy.io/us/019fa320-593b-7569-8e05-9d0f4454601a.png Captured: 2026-07-27 10:30:41 UTC Source report: https://urlscan.io/result/019fa320-593b-7569-8e05-9d0f4454601a/ SHA-256: 70f39e58cc80ed53dbc644d02479f308d27907bc53b567be93aca3dfe50abcf2 - URLScan · 2026-07-28: https://screenshots.phishdestroy.io/us/019fa7b3-e01e-756d-8a77-eb8c63832042.png Captured: 2026-07-28 07:50:17 UTC Source report: https://urlscan.io/result/019fa7b3-e01e-756d-8a77-eb8c63832042/ SHA-256: 38bef833f94151eb8bf717e1f5d2dd5d69ada6c2954669b538badd447d308a06 - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a16035-dff3-76ab-bd1e-7ba5c9728890.png Captured: 2026-10-21 20:45:20 UTC Source report: https://urlscan.io/result/01a16035-dff3-76ab-bd1e-7ba5c9728890/ SHA-256: a38c19d2280483f4a00fdcbbffc9bbe5fdf8f8d7b87956f4e00826e4d2c8db42 - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a16038-7932-75c8-ab8e-8b5664871e54.png Captured: 2026-10-21 20:48:02 UTC Source report: https://urlscan.io/result/01a16038-7932-75c8-ab8e-8b5664871e54/ SHA-256: 5cacf5b1e553d50285584aece618d2125f20cae1f20c8bca19c251ded1a96638 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T20:54:53Z", "uuid": "01a1603b-51de-72bf-8cb2-ce4746886aa4", "scanned_at": "2026-10-21T20:51:11Z", "final_url": "https://apexlumentrix.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://apexlumentrix.com/", "from": "http://apexlumentrix.com/", "status": 307 } ], "ip": "158.94.210.119", "ips": [ "158.94.210.119" ], "asns": [ "202412" ], "countries": [ "NL" ], "doc_hash": "ca055464af2dea24200213a2ca7c15bdb026ef04a99ef0b9440341df7fb19362", "script_hashes": [ "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce" ], "globals": [ "__dclq", "__dclOrig", "__dclFlush", "__smsCheckBeforeSubmit", "__isSmsEnabled", "__isSmsVerified", "intlTelInput", "navToggle", "mainNav", "langBtn", "langDropdown" ], "cookies": [ "connect.sid" ], "tls": { "san": [ "apexlumentrix.com" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "apexlumentrix.com", "protocol": "TLS 1.3", "valid_to": "2026-11-29T18:25:43Z", "valid_from": "2026-08-31T18:25:44Z" }, "domain_age_days": 183, "apex_age_days": 183, "tls_age_days": 51, "tls_valid_days": 89, "requests": 5, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 92, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T20:55:55Z", "uuid": "9398eec8-9f7a-40b0-841f-d2b8c248f720", "scanned_at": "2026-10-21T20:51:35Z", "final_url": "https://apexlumentrix.com/", "status": 200, "history": [ { "url": "https://apexlumentrix.com/", "status": 200 } ], "dom_hash": "2205d1e45e789c4fc13edd1fc34c27da7f422a563eed649ccc05068e059da100", "doc_hash": "4d2f03e5451b3c118864b594cd889ef0c1990ab54be13cf94917edba0473d4f3", "phishing_v2": [ "phishing" ], "url_risks": [ "Scam" ], "domain_risks": [ "Malware", "Security threats", "Scam", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "apexlumentrix.com", "type": "A", "value": "158.94.210.119" } ], "dnssec_valid": false, "ip": "158.94.210.119", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2026-04-21T15:40:31Z", "updated": "2026-08-13T12:41:33Z", "expires": "2027-04-21T15:40:31Z", "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-21T20:50:54Z", "analysis_at": "2026-10-17T11:47:49Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 13, "suspicious": 4, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Fortinet": "phishing", "PREBYTES": "suspicious", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "tags": [ "dga" ], "created": "2026-04-21T00:00:00Z", "updated": "2026-04-21T00:00:00Z", "first_seen": "2026-04-21T16:02:17Z", "dns": [ { "ttl": 300, "type": "NS", "value": "ns2.dyna-ns.net" }, { "ttl": 300, "type": "A", "value": "158.94.210.119" }, { "ttl": 300, "type": "NS", "value": "ns1.dyna-ns.net" }, { "ttl": 300, "type": "SOA", "rname": "hostmaster.apexlumentrix.com", "value": "ns1.dyna-ns.net" } ], "dns_at": "2026-10-17T11:53:14Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "apexlumentrix.com" ], "issuer": "Let's Encrypt / YE1", "serial": "631c8d3a3512600f08705d5206f12fddb3e", "sha256": "83344b23c6318ed61852b9383bf8110ac402774116003ced71e8cf06ed0de05d", "subject": "apexlumentrix.com", "valid_to": "2026-11-29T18:25:43Z", "valid_from": "2026-08-31T18:25:44Z" }, "whois": [], "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-04-21T15:40:31Z", "last changed": "2026-08-31T16:21:25Z", "registration": "2026-04-21T15:40:31Z", "registrar expiration": "2027-04-21T15:40:31Z", "last update of RDAP database": "2026-10-16T07:01:06Z" }, "registrar": "DYNADOT LLC", "registrar_iana_id": "472" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T20:56:12Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "apexlumentrix.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-21T20:44:57Z", "first": "2026-10-13T22:43:13Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.13, "avg_page_bytes": 24480 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://apexlumentrix.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 5 }, "social_tags": { "title": "Apex Lumentrix - AI-Powered Trading & Smart Investing Platform", "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1", "description": "Apex Lumentrix - Discover automated trading tools and AI-driven market analysis. Make smarter investing decisions and access global market opportunities with confidence.", "canonicalUrl": "https://apexlumentrix.com/" }, "trackers": { "requests": 5 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 363, "tls": 71, "wait": 84, "connect": 66, "download": 132 }, "response_ms": 716 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443 ] }, "carbon": { "bytes": 94963, "co2_grams": 0.0035, "cleaner_than": 23 }, "dns_server": { "ns": [ { "ip": "162.159.25.5", "host": "ns2.dyna-ns.net" }, { "ip": "162.159.26.92", "host": "ns1.dyna-ns.net" } ], "zone": "apexlumentrix.com" }, "cookies": { "cookies": [ { "name": "connect.sid", "secure": true, "http_only": true, "same_site": "Lax" } ] }, "location": { "ip": "158.94.210.119", "asn": "202412", "org": "Omegatech LTD", "city": "Amsterdam", "country": "NL" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "apexlumentrix.com" }, "dns": { "A": [ "158.94.210.119" ], "NS": [ "ns2.dyna-ns.net", "ns1.dyna-ns.net" ], "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.apexlumentrix.com\", \"serial\": 2026083101, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "158.94.210.119", "family": 4 }, "redirects": { "chain": [ "https://apexlumentrix.com" ] }, "tech_stack": { "technologies": [ "Tailwind CSS", "jQuery", "Priority Hints", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 36 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-04-21T15:40:31Z", "updated": "2026-08-13T12:41:33Z", "expires": "2027-04-21T15:40:31Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } } } } ```