# PhishDestroy domain threat record: apextraderaipro.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/apextraderaipro.com/
Machine-readable companion: https://phishdestroy.io/domain/apextraderaipro.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-26 20:07:08 UTC
- Last availability or vendor check: 2026-10-26 20:07:08 UTC
- Stored record updated: 2026-10-26 21:00:11 UTC
- VirusTotal detections in the stored snapshot: 4/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 158.94.210.119
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-16 04:42:34 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a179d1-cfec-717d-a0b1-e02edab66e88/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/apextraderaipro.com
- Certificate Transparency search: https://crt.sh/?q=%25.apextraderaipro.com
- Web Archive lookup: https://web.archive.org/web/*/https://apextraderaipro.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
The captured screenshot shows a Spanish-language landing page headed Inteligencia predictiva y liquidez inmediata para su capital excedente, with Comenzar ahora and Conocer la metodología buttons and navigation for Por qué elegimos, Ventajas, Acerca de and Contacto. PhishDestroy listed the domain after intake on 2026-10-26, its first-seen date, while registration dated 2026-10-16 and the intake assessment carried a fraudulent-investment risk signal.

How the scam works
The page stated that ApexTraderAI Pro analyzes the market in real time and converts that information into concrete investment recommendations without requiring funds to be immobilized, while advertising liquidity available at all times. As a category risk, this lure funnels visitors through a start-now sign-up flow to commit capital, after which withdrawal requests may be stalled or tied to further payments. The observed call-to-action buttons and contact link are the collection points for that flow.

Evidence
The screenshot shows a Spanish investment-liquidity pitch with calls to action rather than a familiar login form. urlscan engines scored it malicious at 81 on 2026-10-26, and VirusTotal flagged it as malicious, with G-Data labelling it phishing. Google Safe Browsing was not flagged on 2026-10-26, external blocklists recorded 0 entries while the PhishDestroy internal blocklist flagged it, and OTX recorded 0 pulses on 2026-10-26. A redirect funnel bounced between HTTP and HTTPS before settling on HTTPS. Site inspection noted 4 tracker requests, phone-input and SMS-verification globals, and 1 distinct script SHA256 hash recorded for campaign pivoting (8aa5f8f64735).

Infrastructure
Notable weaknesses lead: CSP, HSTS and X-Frame-Options absent, Permissions-Policy absent, COOP, COEP and CORP absent; X-Content-Type-Options present and Referrer-Policy set to same-origin; no SPF lookups, no DKIM or DMARC observed; DNSSEC unsigned; CAA records present. TLS 1.3 with TLS_AES_128_GCM_SHA256, forward secrecy and ALPN h2. Registrar Dynadot Inc; hosting network recorded as Omegatech LTD in NL; Cloudflare Radar also captured the page on 2026-10-26.

What to do
If you submitted data through this page, change the password on any genuine service account you reused there and enable two-factor authentication, and contact your financial provider if you transferred money. Do not send further payments to release a withdrawal. For defenders, block apextraderaipro.com at proxies, gateways and mail filters, and retain the recorded script hash for campaign pivoting.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a179d1-cfec-717d-a0b1-e02edab66e88/
Cloudflare Radar report: https://radar.cloudflare.com/scan/e0ceda79-229d-4c56-90f8-9925babb8449
Stored capture screenshot: https://i.ibb.co/4ZypNYgJ/57c6b1c7cdd4.png
Cloudflare Radar screenshot (2026-10-26T20:07:42Z): https://screenshots.phishdestroy.io/cf/e0ceda79-229d-4c56-90f8-9925babb8449.png
VirusTotal report: https://www.virustotal.com/gui/domain/apextraderaipro.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=apextraderaipro.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 20:11:07 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/4ZypNYgJ/57c6b1c7cdd4.png
  Captured: 2026-10-26 20:07:08 UTC
- URLScan capture: https://urlscan.io/screenshots/01a179d1-cfec-717d-a0b1-e02edab66e88.png
  Captured: 2026-10-26 20:07:08 UTC
  Source report: https://urlscan.io/result/01a179d1-cfec-717d-a0b1-e02edab66e88/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/e0ceda79-229d-4c56-90f8-9925babb8449.png
  Captured: 2026-10-26 20:07:42 UTC
  Source report: https://radar.cloudflare.com/scan/e0ceda79-229d-4c56-90f8-9925babb8449
  SHA-256: a5113feec0d989f25f2b2dda6faa39df2b3651af07fffd413db1cc18e9523929
- URLQuery: https://screenshots.phishdestroy.io/uq/6c18352a-d54f-49fc-888b-efb9aaf21b85.png
  Source report: https://urlquery.net/report/6c18352a-d54f-49fc-888b-efb9aaf21b85
  SHA-256: c84e2cc283fb90a5ea8b37515ab83fd63a5458972d2ab997596e90329f9af9f2

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T20:08:03Z",
        "uuid": "01a179d1-cfec-717d-a0b1-e02edab66e88",
        "scanned_at": "2026-10-26T20:06:25Z",
        "final_url": "https://apextraderaipro.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://apextraderaipro.com/",
                "from": "http://apextraderaipro.com/",
                "status": 307
            },
            {
                "to": "http://apextraderaipro.com/",
                "from": "https://apextraderaipro.com/",
                "status": 307
            },
            {
                "to": "https://apextraderaipro.com/",
                "from": "http://apextraderaipro.com/",
                "status": 301
            }
        ],
        "ip": "158.94.210.119",
        "ips": [
            "158.94.210.119"
        ],
        "asns": [
            "202412"
        ],
        "countries": [
            "NL"
        ],
        "doc_hash": "966c03ab4e556c0525e19222c4529d4a6d90fbee4b2b34f5975797288623b540",
        "script_hashes": [
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "intlTelInput"
        ],
        "cookies": [
            "connect.sid"
        ],
        "tls": {
            "san": [
                "*.apextraderaipro.com",
                "apextraderaipro.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "apextraderaipro.com",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-19T20:13:31Z",
            "valid_from": "2026-10-21T20:13:32Z"
        },
        "domain_age_days": 9,
        "apex_age_days": 9,
        "tls_age_days": 4,
        "tls_valid_days": 89,
        "requests": 7,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 81,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-26T20:08:06Z",
        "uuid": "e0ceda79-229d-4c56-90f8-9925babb8449",
        "scanned_at": "2026-10-26T20:07:42Z",
        "final_url": "https://apextraderaipro.com/",
        "status": 200,
        "history": [
            {
                "url": "https://apextraderaipro.com/",
                "status": 200
            }
        ],
        "dom_hash": "690da9896aaf4f0a4aaec583234e5d4eeaec5842ad101db7a16434595250407c",
        "doc_hash": "2539cfafac2bb2af7465f6b515d00a7c8d53eb68e4ab2114df0ad6ad9e8506d3",
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks",
            "New Domains"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "apextraderaipro.com",
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dnssec_valid": false,
        "ip": "158.94.210.119",
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-10-16T06:42:34Z",
            "updated": "2026-10-21T20:55:37Z",
            "expires": "2027-10-16T06:42:34Z",
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T20:07:36Z",
        "analysis_at": "2026-10-26T08:05:25Z",
        "stats": {
            "timeout": 0,
            "harmless": 52,
            "malicious": 1,
            "suspicious": 3,
            "undetected": 36
        },
        "detections": {
            "G-Data": "phishing",
            "Sophos": "spam",
            "Fortinet": "spam",
            "Gridinsoft": "suspicious"
        },
        "reputation": 0,
        "categories": {
            "Google": "financial_services",
            "Sophos": "spam urls",
            "alphaMountain.ai": "Spam, Suspicious (alphaMountain.ai)",
            "Forcepoint ThreatSeeker": "newly registered websites"
        },
        "registrar": "Dynadot Inc",
        "created": "2026-10-16T06:42:34Z",
        "expires": "2027-10-16T06:42:34Z",
        "updated": "2026-10-16T06:42:46Z",
        "first_seen": "2026-10-16T06:55:49Z",
        "dns": [
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.apextraderaipro.com",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "158.94.210.119"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            }
        ],
        "dns_at": "2026-10-26T13:07:12Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "*.apextraderaipro.com",
                "apextraderaipro.com"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "616c0beeb56ff32a0fc683360a7ad2af0e7",
            "sha256": "dc89fd38d350ebb0cc7c453cdee5501d45c92e25b3035921b6e571db0bb3628e",
            "subject": "apextraderaipro.com",
            "valid_to": "2027-01-19T20:13:31Z",
            "valid_from": "2026-10-21T20:13:32Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-10-16T06:42:34Z",
            "updated": "2026-10-16T06:42:46Z",
            "expires": "2027-10-16T06:42:34Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "keenan.ns.cloudflare.com",
                "tara.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-10-16T06:42:34Z",
                "last changed": "2026-10-21T21:12:11Z",
                "registration": "2026-10-16T06:42:34Z",
                "registrar expiration": "2027-10-16T06:42:34Z",
                "last update of RDAP database": "2026-10-23T11:22:19Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T20:08:21Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "apextraderaipro.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-16T15:10:02Z",
            "first": "2026-10-16T15:10:02Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 1163
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://apextraderaipro.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "ApexTraderAI Pro — Plataforma de IA para capital con liquidez inmediata",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "description": "ApexTraderAI Pro: plataforma de análisis predictivo con IA para gestionar capital excedente sin inmovilizar fondos. Optimice su liquidez con recomendaciones concretas y retiro disponible en todo momento.",
            "canonicalUrl": "https://apextraderaipro.com/"
        },
        "trackers": {
            "requests": 4
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 442,
                "tls": 112,
                "wait": 233,
                "connect": 84,
                "download": 81
            },
            "response_ms": 952
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 71818,
            "co2_grams": 0.0026,
            "cleaner_than": 29
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.24.5",
                    "host": "ns2.dyna-ns.net"
                },
                {
                    "ip": "162.159.27.158",
                    "host": "ns1.dyna-ns.net"
                }
            ],
            "zone": "apextraderaipro.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "connect.sid",
                    "secure": true,
                    "http_only": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "158.94.210.119",
            "asn": "202412",
            "org": "Omegatech LTD",
            "city": "Amsterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "apextraderaipro.com"
        },
        "dns": {
            "A": [
                "158.94.210.119"
            ],
            "NS": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.apextraderaipro.com\", \"serial\": 2026102103, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "158.94.210.119",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://apextraderaipro.com"
            ]
        },
        "linked_pages": {
            "internal_count": 9
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-10-16T06:42:34Z",
            "updated": "2026-10-21T20:55:37Z",
            "expires": "2027-10-16T06:42:34Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```