# PhishDestroy domain threat record: btcapexellcore.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/btcapexellcore.com/ Machine-readable companion: https://phishdestroy.io/domain/btcapexellcore.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-23 17:04:48 UTC - Last availability or vendor check: 2026-10-23 17:04:48 UTC - Stored record updated: 2026-10-23 18:30:16 UTC - VirusTotal detections in the stored snapshot: 17/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: celer ## Stored infrastructure - Observed IP address: 158.94.210.119 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date (registry RDAP, btcapexellcore.com): 2026-06-05 06:44:19 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a169b7-10de-74aa-b74e-2932d78af89d/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/btcapexellcore.com - Certificate Transparency search: https://crt.sh/?q=%25.btcapexellcore.com - Web Archive lookup: https://web.archive.org/web/*/https://btcapexellcore.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed btcapexellcore.com as a suspicious domain based on automated risk scoring and vendor detections. The recorded page title reads “Next-Gen Algorithmic Trading Platform — BTC-Apexell Core”. The domain was first seen by PhishDestroy on 2026-10-23 and returned an HTTP 200 response on that date. How the scam works The classification does not point to a specific observed behavior; it reflects a general risk that sites with this profile are often used to impersonate crypto services or lure users into providing credentials. No concrete evidence of credential collection, malicious payload delivery, or financial transaction requests was observed on the captured page. Evidence VirusTotal scanned the domain on 2026-10-17 and reported 17 detections from 92 engines, including 14 malicious and 3 suspicious labels from vendors such as BitDefender, CRDF and Forcepoint ThreatSeeker. Google Safe Browsing checked on 2026-10-23 and did not flag the site. PhishDestroy’s internal blocklist marked the domain as malicious on 2026-10-23, while external blocklists returned zero hits. OTX listed five pulses mentioning the domain as of 2026-10-23. urlscan.io captured the site on 2026-10-23; its engine score was 97 (malicious) but the overall verdict was non‑malicious. Cloudflare Radar scanned the same day and returned a malicious verdict with malware and scam categories. Infrastructure The domain was registered on 2026-06-05 through Dynadot Inc and was 140 days old at the time of observation. The recorded DNS A record pointed to 158.94.210.119, which was associated with Omegatech LTD in the Netherlands. The TLS certificate from Let’s Encrypt was issued on 2026-08-31 and was valid until 2026-11-29, and open ports 22, 80 and 443 were observed during the scan. What to do Treat the site as untrusted; do not enter login credentials, API keys, or financial information. If any credentials were submitted, change them immediately, and defenders should add btcapexellcore.com to domain‑level deny lists and monitor for related traffic. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a169b7-10de-74aa-b74e-2932d78af89d/ Cloudflare Radar report: https://radar.cloudflare.com/scan/33dbab50-a9fc-4af3-8e63-0bc0fb4377f5 URLQuery report: https://urlquery.net/report/a9c4cacb-f264-497a-90b5-4964a391208d Stored capture screenshot: https://urlscan.io/screenshots/01a169b7-10de-74aa-b74e-2932d78af89d.png Cloudflare Radar screenshot (2026-10-23T17:36:40Z): https://screenshots.phishdestroy.io/cf/33dbab50-a9fc-4af3-8e63-0bc0fb4377f5.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/a9c4cacb-f264-497a-90b5-4964a391208d.png VirusTotal report: https://www.virustotal.com/gui/domain/btcapexellcore.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=btcapexellcore.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 17:38:03 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a169b7-10de-74aa-b74e-2932d78af89d.png Captured: 2026-10-23 17:04:48 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a169b7-10de-74aa-b74e-2932d78af89d.png Captured: 2026-10-23 17:04:48 UTC Source report: https://urlscan.io/result/01a169b7-10de-74aa-b74e-2932d78af89d/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/33dbab50-a9fc-4af3-8e63-0bc0fb4377f5.png Captured: 2026-10-23 17:36:40 UTC Source report: https://radar.cloudflare.com/scan/33dbab50-a9fc-4af3-8e63-0bc0fb4377f5 SHA-256: 0908b20586279c8992214d9069a2844824a94294f834901cfd0527b8ac4bf539 - URLQuery: https://screenshots.phishdestroy.io/uq/a9c4cacb-f264-497a-90b5-4964a391208d.png Source report: https://urlquery.net/report/a9c4cacb-f264-497a-90b5-4964a391208d SHA-256: 0afa77a73724517e8c5e77724e5e6f39f6af8b31086c10cbf45d8f9b11873bcb ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T17:37:32Z", "uuid": "01a169b7-10de-74aa-b74e-2932d78af89d", "scanned_at": "2026-10-23T17:02:54Z", "final_url": "https://btcapexellcore.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://btcapexellcore.com/", "from": "http://btcapexellcore.com/", "status": 307 } ], "ip": "158.94.210.119", "ips": [ "158.94.210.119" ], "asns": [ "202412" ], "countries": [ "NL" ], "doc_hash": "62cd745f3f53dd6508592970e175bf1767432ee11a85f00149ba02c6b134bcf3", "script_hashes": [ "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce" ], "globals": [ "__dclq", "__dclOrig", "__dclFlush", "__smsCheckBeforeSubmit", "__isSmsEnabled", "__isSmsVerified", "intlTelInput", "navToggle", "mainNav", "langBtn", "langDropdown", "statCards", "observer" ], "cookies": [ "connect.sid" ], "tls": { "san": [ "btcapexellcore.com" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "btcapexellcore.com", "protocol": "TLS 1.3", "valid_to": "2026-11-29T19:07:53Z", "valid_from": "2026-08-31T19:07:54Z" }, "domain_age_days": 140, "apex_age_days": 140, "tls_age_days": 52, "tls_valid_days": 89, "requests": 9, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 97, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T17:37:34Z", "uuid": "33dbab50-a9fc-4af3-8e63-0bc0fb4377f5", "scanned_at": "2026-10-23T17:36:40Z", "final_url": "https://btcapexellcore.com/", "status": 200, "history": [ { "url": "https://btcapexellcore.com/", "status": 200 } ], "dom_hash": "f23b90dd81fe795a08990ee53a6ca4f01264b3bb64b337d190e4cffee9f176d1", "doc_hash": "9d11d629e7dfd5592ec667ce6de2e14b14821a8e90f9d9cda0e617cec8a9c4d3", "phishing_v2": [ "phishing" ], "url_risks": [ "Scam" ], "domain_risks": [ "Malware", "Security threats", "Scam", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "btcapexellcore.com", "type": "A", "value": "158.94.210.119" } ], "dnssec_valid": false, "ip": "158.94.210.119", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2026-06-05T06:44:19Z", "updated": "2026-08-13T12:42:03Z", "expires": "2027-06-05T06:44:19Z", "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T17:36:09Z", "analysis_at": "2026-10-17T11:46:42Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 14, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Fortinet": "phishing", "Netcraft": "malicious", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "registrar": "Dynadot Inc", "created": "2026-06-05T06:44:19Z", "expires": "2027-06-05T06:44:19Z", "updated": "2026-08-13T12:42:03Z", "first_seen": "2026-06-07T01:15:38Z", "dns": [ { "ttl": 300, "type": "A", "value": "158.94.210.119" }, { "ttl": 300, "type": "SOA", "rname": "hostmaster.btcapexellcore.com", "value": "ns1.dyna-ns.net" }, { "ttl": 300, "type": "NS", "value": "ns1.dyna-ns.net" }, { "ttl": 300, "type": "NS", "value": "ns2.dyna-ns.net" } ], "dns_at": "2026-10-17T11:52:33Z", "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319", "cert": { "san": [ "btcapexellcore.com" ], "issuer": "Let's Encrypt / YE2", "serial": "5d37c762598026d55724180173c1fae8c41", "sha256": "d6ec9075cc9833c5a3001cc3385217e2f02ad206302c4f44bf55d94b344f85bc", "subject": "btcapexellcore.com", "valid_to": "2026-11-29T19:07:53Z", "valid_from": "2026-08-31T19:07:54Z" }, "whois": { "registrar": "Dynadot Inc", "registrar_iana_id": "472", "registrar_url": "http://www.dynadot.com", "created": "2026-06-05T06:44:19Z", "updated": "2026-08-13T12:42:03Z", "expires": "2027-06-05T06:44:19Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-06-05T06:44:19Z", "last changed": "2026-08-31T16:26:37Z", "registration": "2026-06-05T06:44:19Z", "registrar expiration": "2027-06-05T06:44:19Z", "last update of RDAP database": "2026-10-14T00:10:38Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T17:05:47Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "btcapexellcore.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-17T06:36:54Z", "first": "2026-10-17T06:36:54Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 24394 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://btcapexellcore.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 5 }, "social_tags": { "title": "Next-Gen Algorithmic Trading Platform — BTC-Apexell Core", "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1", "description": "140+ markets. Predictive market modeling. BTC-Apexell Core is your AI-powered trading platform for data-driven crypto strategies and automated portfolio execution.", "canonicalUrl": "https://btcapexellcore.com/" }, "trackers": { "requests": 52, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 3 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 890, "tls": 124, "wait": 98, "connect": 72, "download": 138 }, "response_ms": 1322 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443 ] }, "carbon": { "bytes": 98237, "co2_grams": 0.0036, "cleaner_than": 22 }, "dns_server": { "ns": [ { "ip": "162.159.26.92", "host": "ns1.dyna-ns.net" }, { "ip": "162.159.25.5", "host": "ns2.dyna-ns.net" } ], "zone": "btcapexellcore.com" }, "cookies": { "cookies": [ { "name": "cf-c", "http_only": true, "same_site": "Lax" }, { "name": "__cf_clicked" }, { "name": "ph_phc_t6w4wzJE2sbz4ro8LmZZTssm5go3KD6mP7QsqcDQRSp6_posthog", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "158.94.210.119", "asn": "202412", "org": "Omegatech LTD", "city": "Amsterdam", "country": "NL" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "btcapexellcore.com" }, "dns": { "A": [ "158.94.210.119" ], "NS": [ "ns2.dyna-ns.net", "ns1.dyna-ns.net" ], "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.btcapexellcore.com\", \"serial\": 2026083101, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": "same-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "158.94.210.119", "family": 4 }, "redirects": { "chain": [ "https://btcapexellcore.com" ] }, "linked_pages": { "internal_count": 26 }, "whois": { "registrar": "Dynadot Inc", "created": "2026-06-05T06:44:19Z", "updated": "2026-08-13T12:42:03Z", "expires": "2027-06-05T06:44:19Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.dyna-ns.net", "ns2.dyna-ns.net" ] }, "headers": { "headers": { "content-type": "text/html; charset=utf-8", "x-content-type-options": "nosniff", "referrer-policy": "same-origin" } } } } ```