# PhishDestroy domain threat record: ceucapito.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/ceucapito.com/
Machine-readable companion: https://phishdestroy.io/domain/ceucapito.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-26 20:07:24 UTC
- Last availability or vendor check: 2026-10-26 20:07:24 UTC
- Stored record updated: 2026-10-26 21:00:11 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: chase

## Stored infrastructure

- Observed IP address: 158.94.210.119
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-22 06:05:55 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a179d1-cc02-7778-a901-a0e857864200/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/ceucapito.com
- Certificate Transparency search: https://crt.sh/?q=%25.ceucapito.com
- Web Archive lookup: https://web.archive.org/web/*/https://ceucapito.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
The captured screenshot from 2026-10-26 showed a landing page branded Ceu Capito, headed Institutional-grade AI for your personal portfolio, under an AI PORTFOLIO INTELLIGENCE label. PhishDestroy listed ceucapito.com after a trusted report plus an intake assessment that judged the page malicious with a score of 90 on 2026-10-26, citing a fraudulent-investment pattern. The domain was first seen by PhishDestroy on 2026-10-26, four days after its 2026-10-22 registration.

How the scam works
The page invited visitors to click Start Your Portfolio and claimed it would build a data-driven crypto allocation in under sixty seconds using permitted, read-and-trade API keys. As a category risk, this lure is designed to obtain exchange credentials or API key material that would let an unverified operator trade or move funds, while the non-custodial wording works to lower suspicion. Anyone who completed such a flow would be handing control-relevant account access away.

Evidence
The screenshot showed the headline, a Start Your Portfolio button, a See how it works link, and copy promising non-custodial access through read-and-trade API keys. PhishDestroy's intake AI gave a malicious verdict with a score of 90 on 2026-10-26. VirusTotal did not flag the domain and Google Safe Browsing did not flag it, both checked on 2026-10-26, while OTX returned zero pulses on the same date; these negative results are not proof of safety. No site-inspection script hashes or framework details were recorded in the signals.

Infrastructure
ceucapito.com was registered on 2026-10-22 through registrar Dynadot Inc, and PhishDestroy first saw it on 2026-10-26. A hosting address was recorded, but no CDN or WAF attribution is supported by the signals. TLS, HTTP security-header, email-authentication, CAA and DNSSEC results were not part of the collected signals, so no conclusion about those protections should be drawn.

What to do
If you submitted exchange credentials or API keys relating to ceucapito.com, change your password on the genuine exchange, enable two-factor authentication, and regenerate any API keys you disclosed, then review account activity for unauthorized trades or withdrawals. Defenders should block ceucapito.com at proxy, DNS and mail layers and pivot on the 2026-10-22 registration date when hunting related infrastructure.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a179d1-cc02-7778-a901-a0e857864200/
Stored capture screenshot: https://i.ibb.co/6Jwq71py/ea7bb4ec5d95.png
VirusTotal report: https://www.virustotal.com/gui/domain/ceucapito.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=ceucapito.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 20:10:54 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/6Jwq71py/ea7bb4ec5d95.png
  Captured: 2026-10-26 20:07:24 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a179d1-cc02-7778-a901-a0e857864200.png
  Captured: 2026-10-26 20:07:24 UTC
  Source report: https://urlscan.io/result/01a179d1-cc02-7778-a901-a0e857864200/
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a179ce-e618-739a-9859-0534ab8ed1e9.png
  Captured: 2026-10-26 20:02:57 UTC
  Source report: https://urlscan.io/result/01a179ce-e618-739a-9859-0534ab8ed1e9/
  SHA-256: 96005a2a4150b2c2a3683221ba558901aad7ee4f834414988675300142d44ca2
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a179d1-3096-77c3-afb2-df5d8fc3693e.png
  Captured: 2026-10-26 20:05:25 UTC
  Source report: https://urlscan.io/result/01a179d1-3096-77c3-afb2-df5d8fc3693e/
  SHA-256: 96005a2a4150b2c2a3683221ba558901aad7ee4f834414988675300142d44ca2
- URLQuery: https://screenshots.phishdestroy.io/uq/eade4bc7-adc1-4a6a-a72c-a08f0057297e.png
  Source report: https://urlquery.net/report/eade4bc7-adc1-4a6a-a72c-a08f0057297e
  SHA-256: fc1f23572c809f14a1a51d855164e7310f5306dd5dfb854f2633dd550f0d5a83

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T20:19:22Z",
        "uuid": "01a179d1-cc02-7778-a901-a0e857864200",
        "scanned_at": "2026-10-26T20:06:04Z",
        "final_url": "https://ceucapito.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://ceucapito.com/",
                "from": "http://ceucapito.com/",
                "status": 307
            },
            {
                "to": "http://ceucapito.com/",
                "from": "https://ceucapito.com/",
                "status": 307
            },
            {
                "to": "https://ceucapito.com/",
                "from": "http://ceucapito.com/",
                "status": 301
            }
        ],
        "ip": "158.94.210.119",
        "ips": [
            "158.94.210.119"
        ],
        "asns": [
            "202412"
        ],
        "countries": [
            "NL"
        ],
        "doc_hash": "a1e0af7c80ed3f5646010546e602488f921abf743208244f4288b23261948602",
        "script_hashes": [
            "8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
        ],
        "globals": [
            "__dclq",
            "__dclOrig",
            "__dclFlush",
            "__smsCheckBeforeSubmit",
            "__isSmsEnabled",
            "__isSmsVerified",
            "intlTelInput"
        ],
        "cookies": [
            "connect.sid"
        ],
        "tls": {
            "san": [
                "*.ceucapito.com",
                "ceucapito.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "ceucapito.com",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-23T12:38:05Z",
            "valid_from": "2026-10-25T12:38:06Z"
        },
        "domain_age_days": 2,
        "apex_age_days": 2,
        "tls_age_days": 1,
        "tls_valid_days": 89,
        "requests": 7,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 100,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "same-origin"
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T20:37:47Z",
        "analysis_at": "2026-10-26T00:24:19Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "registrar": "Dynadot Inc",
        "created": "2026-10-22T08:05:55Z",
        "expires": "2027-10-22T08:05:55Z",
        "updated": "2026-10-22T08:06:11Z",
        "first_seen": "2026-10-22T08:14:39Z",
        "dns": [
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns2.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "SOA",
                "rname": "hostmaster.ceucapito.com",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "NS",
                "value": "ns1.dyna-ns.net"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "158.94.210.119"
            }
        ],
        "dns_at": "2026-10-26T00:30:01Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "*.ceucapito.com",
                "ceucapito.com"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "5a68c6905b2dc15517be9496d082d9c164f",
            "sha256": "a71fc3103040668dbd27aa987cdd1c4c39b844a0e4315968a5e5e4e4e4f3bed8",
            "subject": "ceucapito.com",
            "valid_to": "2027-01-23T12:38:05Z",
            "valid_from": "2026-10-25T12:38:06Z"
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "registrar_iana_id": "472",
            "registrar_url": "http://www.dynadot.com",
            "created": "2026-10-22T08:05:55Z",
            "updated": "2026-10-22T08:06:11Z",
            "expires": "2027-10-22T08:05:55Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "kirk.ns.cloudflare.com",
                "paityn.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-10-22T08:05:55Z",
                "last changed": "2026-10-22T08:06:11Z",
                "registration": "2026-10-22T08:05:55Z",
                "last update of RDAP database": "2026-10-22T08:14:05Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T20:36:39Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "ceucapito.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-26T20:09:01Z",
            "first": "2026-10-26T20:09:01Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 21447
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://ceucapito.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "title": "Ceu Capito — AI Platform for Smarter Crypto Portfolios",
            "robots": "index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1",
            "description": "Discover with Ceu Capito an AI platform that builds a data-driven crypto allocation in under sixty seconds. Connect your exchange and let structured intelligence manage your portfolio.",
            "canonicalUrl": "https://ceucapito.com/"
        },
        "trackers": {
            "requests": 38,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 4
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 922,
                "tls": 98,
                "wait": 2012,
                "connect": 105,
                "download": 149
            },
            "response_ms": 3286
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 74440,
            "co2_grams": 0.0027,
            "cleaner_than": 28
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.24.5",
                    "host": "ns2.dyna-ns.net"
                },
                {
                    "ip": "162.159.26.92",
                    "host": "ns1.dyna-ns.net"
                }
            ],
            "zone": "ceucapito.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "cf-c",
                    "http_only": true,
                    "same_site": "Lax"
                },
                {
                    "name": "__cf_clicked"
                },
                {
                    "name": "ph_phc_t6w4wzJE2sbz4ro8LmZZTssm5go3KD6mP7QsqcDQRSp6_posthog",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "158.94.210.119",
            "asn": "202412",
            "org": "Omegatech LTD",
            "city": "Amsterdam",
            "country": "NL"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "ceucapito.com"
        },
        "dns": {
            "A": [
                "158.94.210.119"
            ],
            "NS": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ],
            "SOA": "{\"nsname\": \"ns1.dyna-ns.net\", \"hostmaster\": \"hostmaster.ceucapito.com\", \"serial\": 2026102503, \"refresh\": 16384, \"retry\": 2048, \"expire\": 1209600, \"minttl\": 300}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "same-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "158.94.210.119",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://ceucapito.com"
            ]
        },
        "linked_pages": {
            "internal_count": 9
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-10-22T08:05:55Z",
            "updated": "2026-10-25T13:19:59Z",
            "expires": "2027-10-22T08:05:55Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.dyna-ns.net",
                "ns2.dyna-ns.net"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=utf-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "same-origin"
            }
        }
    }
}
```