# PhishDestroy domain threat record: dornatrixelsolution.click

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/dornatrixelsolution.click/
Machine-readable companion: https://phishdestroy.io/domain/dornatrixelsolution.click/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 10:39:33 UTC
- Last availability or vendor check: 2026-10-25 12:23:28 UTC
- Stored record updated: 2026-10-25 12:23:28 UTC
- VirusTotal detections in the stored snapshot: 16/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 104.21.54.184
- Registrar in stored WHOIS data: Spaceship, Inc.
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-09-10 05:49:01 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a172ae-6ac8-728c-ab58-8a3143b859fa/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/dornatrixelsolution.click
- Certificate Transparency search: https://crt.sh/?q=%25.dornatrixelsolution.click
- Web Archive lookup: https://web.archive.org/web/*/https://dornatrixelsolution.click/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added dornatrixelsolution.click to its internal blocklist on 2026-10-25 after a trusted‑auto intake rule flagged the newly registered domain. The recorded page title advertises an "AI Trading Platform" and the site returned HTTP 200 on the same day. The domain was first seen by PhishDestroy on 2026-10-25.

How the scam works
The listing does not confirm a specific fraud technique, but domains that present fake trading services often lure users into depositing funds or providing credentials. In such schemes the attacker may display fabricated performance data and request payments to a controlled wallet. No direct evidence of these actions was observed on the captured page, so the risk remains generic and based on the detection profile.

Evidence
VirusTotal scanned the domain on 2026-10-23 and recorded 16 detections from 92 engines, including 13 malicious and 3 suspicious labels from vendors such as BitDefender, ESET and Forcepoint ThreatSeeker. Google Safe Browsing checked on 2026-10-25 and reported no flag. PhishDestroy’s own blocklist marked the domain as internal on 2026-10-25, while external blocklists showed zero hits. OTX listed one pulse on 2026-10-25. urlscan.io captured the site on 2026-09-17, where its engine score was 100 malicious but the overall verdict was non‑malicious; Cloudflare Radar on 2026-10-25 flagged the domain as malware.

Infrastructure
The domain was registered with Spaceship, Inc. on 2026-09-10 and uses Cloudflare’s network, resolving to the recorded IP 172.67.141.9 located in Canada according to the hosting record. TLS was provided by Google Trust Services, valid from 2026-09-10 to 2026-12-09, and the authoritative nameservers are kenneth.ns.cloudflare.com and macy.ns.cloudflare.com.

What to do
Visitors should avoid entering credentials, personal data or financial information on the site and consider changing passwords if any were submitted. Security teams can block the exact domain and monitor DNS queries for the recorded IP address, and apply web‑filtering rules to prevent access. Continue to watch for any related indicators of compromise in logs or endpoint alerts.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a0aed5-ebf7-70a4-a55c-382cb6f6cf14/
Cloudflare Radar report: https://radar.cloudflare.com/scan/3e9f1dde-6a03-4de0-98b1-bd53e32ea3df
Stored capture screenshot: https://urlscan.io/screenshots/01a0aed5-ebf7-70a4-a55c-382cb6f6cf14.png
Cloudflare Radar screenshot (2026-10-25T10:43:51Z): https://screenshots.phishdestroy.io/cf/3e9f1dde-6a03-4de0-98b1-bd53e32ea3df.png
URLScan screenshot (2026-09-16T13:01:05Z): https://screenshots.phishdestroy.io/us/01a0aa4e-5821-705b-b171-71771b32e067.png
URLScan capture report: https://urlscan.io/result/01a0aa4e-5821-705b-b171-71771b32e067/
VirusTotal report: https://www.virustotal.com/gui/domain/dornatrixelsolution.click
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=dornatrixelsolution.click
Archived copy: https://web.archive.org/web/20261025104011/https://dornatrixelsolution.click/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 10:47:34 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a172ae-6ac8-728c-ab58-8a3143b859fa.png
  Captured: 2026-10-25 10:51:56 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a0aed5-ebf7-70a4-a55c-382cb6f6cf14.png
  Captured: 2026-10-25 10:39:33 UTC
  Source report: https://urlscan.io/result/01a172ae-6ac8-728c-ab58-8a3143b859fa/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/3e9f1dde-6a03-4de0-98b1-bd53e32ea3df.png
  Captured: 2026-10-25 10:43:51 UTC
  Source report: https://radar.cloudflare.com/scan/3e9f1dde-6a03-4de0-98b1-bd53e32ea3df
  SHA-256: 10c1c9f4d9239a4370c515e1854650b792c24fed1ca60c9f9e5978616b87acf9
- URLQuery: https://screenshots.phishdestroy.io/uq/66eb2f3d-0f98-461d-9d41-65f354e2c4e1.png
  Source report: https://urlquery.net/report/66eb2f3d-0f98-461d-9d41-65f354e2c4e1
  SHA-256: 8e85a764384777ca6c53e9e99b054bdb919ab054e16ff6113781cb6ef174328f
- URLScan · 2026-09-16: https://screenshots.phishdestroy.io/us/01a0aa4e-5821-705b-b171-71771b32e067.png
  Captured: 2026-09-16 13:01:05 UTC
  Source report: https://urlscan.io/result/01a0aa4e-5821-705b-b171-71771b32e067/
  SHA-256: 0f5823b5af561500ff9eb7737bcc8ffd0d81b075b0e644da9d00ac2bb2bbba22
- URLScan · 2026-09-17: https://screenshots.phishdestroy.io/us/01a0aed5-ebf7-70a4-a55c-382cb6f6cf14.png
  Captured: 2026-09-17 10:07:39 UTC
  Source report: https://urlscan.io/result/01a0aed5-ebf7-70a4-a55c-382cb6f6cf14/
  SHA-256: e992f258535118c167a51e355a8630125689efe1901d70ab962be67c5b31dd56
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a172af-280a-7149-98bb-13080934aa51.png
  Captured: 2026-10-25 10:51:02 UTC
  Source report: https://urlscan.io/result/01a172af-280a-7149-98bb-13080934aa51/
  SHA-256: 1f61726ab3e573610d5742c569d2006a388e9ad982e90799b728a59a59ec90b3

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T11:35:26Z",
        "uuid": "01a172ae-6ac8-728c-ab58-8a3143b859fa",
        "scanned_at": "2026-10-25T10:50:06Z",
        "final_url": "https://dornatrixelsolution.click/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://dornatrixelsolution.click/",
                "from": "http://dornatrixelsolution.click/",
                "status": 307
            }
        ],
        "ip": "104.21.54.184",
        "domains": [
            "cdnjs.cloudflare.com",
            "challenges.cloudflare.com",
            "cdn.jsdelivr.net",
            "fonts.googleapis.com",
            "static.cloudflare.com"
        ],
        "ips": [
            "104.18.94.41",
            "104.18.95.41",
            "104.17.207.5",
            "142.251.127.95",
            "104.17.24.14",
            "104.21.54.184"
        ],
        "asns": [
            "13335",
            "15169"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "46da4a98c88db7b876f9aee70a965ff7655e3cef43d2fb99a11fc6c004c36eac",
        "script_hashes": [
            "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142"
        ],
        "globals": [
            "LANG_MSGS",
            "ClientJS",
            "_wggv9",
            "toggleTermsPopup",
            "__tsGet",
            "__tsNeedsClick",
            "__tsShow",
            "__tsReset",
            "__lgBS",
            "__cfQR",
            "turnstile",
            "__cfRLUnblockHandlers",
            "__lgT0"
        ],
        "cookies": [
            "entry_url"
        ],
        "tls": {
            "san": [
                "dornatrixelsolution.click"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "dornatrixelsolution.click",
            "protocol": "QUIC",
            "valid_to": "2026-12-09T09:05:12Z",
            "valid_from": "2026-09-10T08:05:16Z"
        },
        "domain_age_days": 45,
        "apex_age_days": 45,
        "tls_age_days": 45,
        "tls_valid_days": 90,
        "requests": 19,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 99,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
            "content-security-policy": "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com",
            "x-frame-options": "SAMEORIGIN",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin",
            "permissions-policy": "camera=(), microphone=(), geolocation=()",
            "cross-origin-opener-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T10:46:54Z",
        "uuid": "3e9f1dde-6a03-4de0-98b1-bd53e32ea3df",
        "scanned_at": "2026-10-25T10:43:51Z",
        "final_url": "https://dornatrixelsolution.click/",
        "status": 200,
        "history": [
            {
                "url": "https://dornatrixelsolution.click/",
                "status": 200
            }
        ],
        "dom_hash": "abed4cd754a6a4dae482386ffcf6789993ac9ed1b034cbb96b2cd8d244515fcb",
        "doc_hash": "6d134e87cea030c22ddbcc75f1692c8783e2d76706db8f96671e0c2d14bc80b3",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "dornatrixelsolution.click",
                "type": "A",
                "value": "172.67.141.9"
            },
            {
                "name": "dornatrixelsolution.click",
                "type": "A",
                "value": "104.21.54.184"
            },
            {
                "name": "dornatrixelsolution.click",
                "type": "AAAA",
                "value": "2606:4700:3030::ac43:8d09"
            },
            {
                "name": "dornatrixelsolution.click",
                "type": "AAAA",
                "value": "2606:4700:3031::6815:36b8"
            }
        ],
        "dnssec_valid": false,
        "ip": "172.67.141.9",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Spaceship, Inc.",
            "created": "2026-09-10T07:49:01Z",
            "updated": "2026-09-15T07:49:51Z",
            "expires": "2027-09-10T07:49:01Z",
            "nameservers": [
                "kenneth.ns.cloudflare.com",
                "macy.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T10:42:56Z",
        "analysis_at": "2026-10-23T21:08:47Z",
        "stats": {
            "timeout": 0,
            "harmless": 43,
            "malicious": 13,
            "suspicious": 3,
            "undetected": 33
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "registrar": "Spaceship, Inc.",
        "created": "2026-09-10T07:49:01Z",
        "expires": "2027-09-10T07:49:01Z",
        "updated": "2026-09-15T07:49:51Z",
        "first_seen": "2026-09-13T01:34:24Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.141.9"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "kenneth.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3030::ac43:8d09"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "kenneth.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::6815:36b8"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.54.184"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "macy.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-23T21:14:09Z",
        "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6",
        "cert": {
            "san": [
                "dornatrixelsolution.click"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "f3a85aa0e9c5c00813b9e9ab58b1a3d4",
            "sha256": "05d7dd6a1508ef433273b57e972a0fd30117ee5b845af03ecb7cad9f45b85036",
            "subject": "dornatrixelsolution.click",
            "valid_to": "2026-12-09T09:05:12Z",
            "valid_from": "2026-09-10T08:05:16Z"
        },
        "whois": {
            "registrar": "Spaceship, Inc.",
            "registrar_iana_id": "3862",
            "registrar_url": "https://www.spaceship.com/",
            "created": "2026-09-10T07:49:01Z",
            "updated": "2026-09-15T07:49:51Z",
            "expires": "2027-09-10T07:49:01Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "kenneth.ns.cloudflare.com",
                "macy.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited",
                "add period"
            ],
            "events": {
                "last changed": "2026-09-10T09:00:02Z",
                "registration": "2026-09-10T07:49:01Z",
                "registrar expiration": "2027-09-10T07:49:01Z",
                "last update of RDAP database": "2026-10-23T21:14:07Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T10:47:04Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "dornatrixelsolution.click"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-25T10:40:11Z",
            "first": "2026-09-10T10:04:08Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.02,
            "avg_page_bytes": 36345
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://dornatrixelsolution.click/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 140
        },
        "social_tags": {
            "ogUrl": "https://dornatrixelsolution.click/",
            "title": "Dornatrixel | AI Trading Platform | Official Web Application",
            "ogType": "website",
            "robots": "index, follow",
            "ogTitle": "Dornatrixel | AI-Powered Trading Mastery",
            "ogSiteName": "Dornatrixel",
            "themeColor": "#f5f9ff",
            "description": "Dornatrixel delivers AI-driven trading support with automated strategies, market surveillance, and risk governance.",
            "twitterCard": "summary",
            "canonicalUrl": "https://dornatrixelsolution.click/",
            "ogDescription": "Dornatrixel offers AI-driven trading support with automated bots, market monitoring tools, and comprehensive risk management."
        },
        "trackers": {
            "requests": 18,
            "trackers": [
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 8
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://static.cloudflare.com/beacon.min.js",
                "https://challenges.cloudflare.com/turnstile/v0/api.js",
                "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 3,
                "tls": 28,
                "wait": 75,
                "connect": 45,
                "download": 33
            },
            "response_ms": 184
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 132052,
            "co2_grams": 0.0048,
            "cleaner_than": 16
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.195.41",
                    "host": "kenneth.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.194.78",
                    "host": "macy.ns.cloudflare.com"
                }
            ],
            "zone": "dornatrixelsolution.click"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "entry_url",
                    "secure": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2606:4700:3031::6815:36b8",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "dornatrixelsolution.click"
        },
        "dns": {
            "A": [
                "172.67.141.9",
                "104.21.54.184"
            ],
            "NS": [
                "kenneth.ns.cloudflare.com",
                "macy.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"kenneth.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418086644, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3031::6815:36b8",
                "2606:4700:3030::ac43:8d09"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=63072000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": "SAMEORIGIN",
            "referrerPolicy": "strict-origin",
            "xXSSProtection": false,
            "permissionsPolicy": "camera=(), microphone=(), geolocation=()",
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenge",
            "strictTransportPolicy": "max-age=63072000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": "same-origin",
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3030::ac43:8d09",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://dornatrixelsolution.click"
            ]
        },
        "linked_pages": {
            "internal_count": 38
        },
        "whois": {
            "registrar": "Spaceship, Inc.",
            "created": "2026-09-10T07:49:01Z",
            "updated": "2026-09-15T07:49:51Z",
            "expires": "2027-09-10T07:49:01Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "kenneth.ns.cloudflare.com",
                "macy.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
                "content-security-policy": "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com",
                "x-frame-options": "SAMEORIGIN",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin",
                "permissions-policy": "camera=(), microphone=(), geolocation=()",
                "cross-origin-opener-policy": "same-origin"
            }
        }
    }
}
```