# nexutebrillopro.com AI Trading Platform Account Registration Page | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/nexutebrillopro.com/ Machine-readable companion: https://phishdestroy.io/domain/nexutebrillopro.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: unknown - First observed by PhishDestroy: 2026-11-01 06:07:16 UTC - Stored record updated: 2026-11-01 09:22:25 UTC - VirusTotal detections in the stored snapshot: 1/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 104.21.16.83 - Registrar in stored WHOIS data: MAT BAO CORPORATION - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-07-27 06:48:13 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a0806e-f944-73fc-a64a-17c6f2dd5075/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/nexutebrillopro.com - Certificate Transparency search: https://crt.sh/?q=%25.nexutebrillopro.com - Web Archive lookup: https://web.archive.org/web/*/https://nexutebrillopro.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records nexutebrillopro.com as an AI trading platform homepage with an account registration form. The captured page for nexutebrillopro.com presents itself as an AI trading platform homepage, with a headline describing automated trading orchestration and supporting feature cards. The main interaction is an account registration form requesting first name, surname, email address, and phone number, alongside a Cloudflare human verification checkbox and links to terms, privacy, and cookie policies. A disclaimer banner at the bottom states the site functions solely as a marketing platform and does not provide trading, brokerage, or investment services. The stored VirusTotal domain result reports 1 detection out of 92 engines. SOCRadar reported "phishing". Package revision: a0b209d720948b4f68e328ea43c53f762b3da210c7feb15f313bb84071515976 Text generated (not scan time): 2026-11-01 08:10:13 Reviewed evidence snapshot: {"domain":"nexutebrillopro.com","screenshot_available":true,"page_title":"nexute brillo | AI Trading Platform | Official Homepage","original_meta_description":"nexute brillo delivers a refined AI-driven trading automation suite for precise execution, robust risk governance, and real-time portfolio visibility, with ready-to-run bot workflows, secure onboarding, and crisp tooling.","initial_ai_description":"The website presents itself as an 'AI Trading Platform' and uses generic language associated with investment schemes, which is a common tactic for fraudulent investment sites. The domain name 'nexutebrillopro.com' does not correspond to any known legitimate financial institution or AI trading platform.","metadata_observed_on":"2026-11-01","initial_ai_description_kind":"previous AI opinion, not independent evidence","virustotal":{"detections":1,"engines":92,"malicious":1,"suspicious":0,"retrieved_date":"2026-11-01","analysis_date":"2026-10-29","flagging_vendors":["SOCRadar"],"vendor_labels":{"SOCRadar":"phishing"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-11-01T06:34:20Z","final_host":"nexutebrillopro.com","captured_on":"2026-11-01"},"virustotal_public_summary":"The stored VirusTotal domain result reports 1 detection out of 92 engines. SOCRadar reported \"phishing\".","page_paragraph_target_characters":544} Source facts (timestamps as stored): {"record_id":1727855,"first_recorded_at":"2026-11-01 07:07:16","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":1,"denominator":92,"malicious":1,"suspicious":0,"vendors":{"SOCRadar":"phishing"},"observed_at":"2026-10-29T08:33:21Z","checked_at":"2026-11-01 08:04:35","fetched_at":"2026-11-01T07:04:22Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":1,"denominator":92,"malicious":null,"suspicious":null,"vendors":["SOCRadar"],"observed_at":"2026-10-29 08:33:21","checked_at":"2026-11-01 08:04:35","fetched_at":"2026-11-01 07:04:36","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-01 08:04:45"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-01 08:30:17"},"availability":{"source":"stored HTTP observation","state":"unknown","observed_at":null}} ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a0806e-f944-73fc-a64a-17c6f2dd5075.png Captured: 2026-11-01 06:07:16 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a0806e-f944-73fc-a64a-17c6f2dd5075.png Source report: https://urlscan.io/result/01a0806e-f944-73fc-a64a-17c6f2dd5075/ - URLScan · 2026-09-07: https://screenshots.phishdestroy.io/us/01a07af0-ae28-73b2-95ef-b7dcd47c7be8.png Captured: 2026-09-07 08:17:13 UTC Source report: https://urlscan.io/result/01a07af0-ae28-73b2-95ef-b7dcd47c7be8/ SHA-256: 97ff32cf10963d0b3db6d82e486a7281b316df820f6e71988fb190fa5515a710 - URLScan · 2026-11-01: https://screenshots.phishdestroy.io/us/01a195b9-45f7-7102-b8d3-5cc9d9588b53.png Captured: 2026-11-01 06:08:40 UTC Source report: https://urlscan.io/result/01a195b9-45f7-7102-b8d3-5cc9d9588b53/ SHA-256: 85c830325dd4e455a491e87d353c7a3fdf81e61b7bad5ff6358d13bc6d092ae6 - URLScan · 2026-11-01: https://screenshots.phishdestroy.io/us/01a195bc-4811-774e-95f9-08591429f600.png Captured: 2026-11-01 06:11:57 UTC Source report: https://urlscan.io/result/01a195bc-4811-774e-95f9-08591429f600/ SHA-256: 4936b02beca3bb7bcb079a15700fe55fd620630984887ca02275ef690039fdd9 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/15ae0345-a9fa-4762-a3e5-362e68016182.png Captured: 2026-11-01 06:34:20 UTC Source report: https://radar.cloudflare.com/scan/15ae0345-a9fa-4762-a3e5-362e68016182 SHA-256: f9a148251c2ea70d6a231615abb9926f43ae5ab3153b51cf9a46f7d399f5fbcf ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-01T06:37:45Z", "uuid": "01a0806e-f944-73fc-a64a-17c6f2dd5075", "scanned_at": "2026-09-08T09:52:40Z", "final_url": "https://nexutebrillopro.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://nexutebrillopro.com/", "from": "http://nexutebrillopro.com/", "status": 307 } ], "ip": "2606:4700:3037::ac43:a6f5", "domains": [ "cdnjs.cloudflare.com", "fonts.gstatic.com", "cdn.jsdelivr.net", "fonts.googleapis.com", "static.cloudflareinsights.com", "static.cloudflare.com" ], "ips": [ "2607:f8b0:4004:c06::5e", "2606:4700::6811:cf05", "2607:f8b0:4004:c1d::5f", "2606:4700::6811:190e", "2606:4700:3037::ac43:a6f5" ], "asns": [ "15169", "13335" ], "countries": [ "US" ], "doc_hash": "78d9d05ab3cbbaf4d0dbf76a799f58f07b9c9f2b2f9a3d4863f177e0abfbaf32", "script_hashes": [ "ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142" ], "globals": [ "LANG_MSGS", "ClientJS", "_t51qa", "toggleTermsPopup", "__cfQR", "__cfRLUnblockHandlers", "__lgT0" ], "cookies": [ "entry_url" ], "tls": { "san": [ "nexutebrillopro.com" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "nexutebrillopro.com", "protocol": "QUIC", "valid_to": "2026-10-30T12:40:41Z", "valid_from": "2026-08-01T11:40:44Z" }, "domain_age_days": 43, "apex_age_days": 43, "tls_age_days": 37, "tls_valid_days": 90, "requests": 19, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "content-security-policy": "img-src 'self' data: blob:; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; frame-an", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-11-01T06:37:47Z", "uuid": "15ae0345-a9fa-4762-a3e5-362e68016182", "scanned_at": "2026-11-01T06:34:20Z", "final_url": "https://nexutebrillopro.com/", "status": 200, "history": [ { "url": "https://nexutebrillopro.com/", "status": 200 } ], "dom_hash": "16b8384edecdd5afe03cb9a03dffeb3f57f687a2c9b2c3e334b8be3d6b8c24fc", "doc_hash": "0630a81330b35abdcaac8e2ba1a671ed125cb7ebcd03193223121a777b527596", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "nexutebrillopro.com", "type": "A", "value": "172.67.166.245" }, { "name": "nexutebrillopro.com", "type": "A", "value": "104.21.16.83" }, { "name": "nexutebrillopro.com", "type": "AAAA", "value": "2606:4700:3033::6815:1053" }, { "name": "nexutebrillopro.com", "type": "AAAA", "value": "2606:4700:3037::ac43:a6f5" } ], "dnssec_valid": false, "ip": "127.0.1.7", "whois": { "registrar": "MAT BAO CORPORATION", "created": "2026-07-27T08:48:13Z", "updated": "2026-07-27T10:56:23Z", "expires": "2027-07-27T08:48:13Z", "nameservers": [ "alla.ns.cloudflare.com", "fonzie.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-01T07:04:22Z", "analysis_at": "2026-10-29T08:33:21Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 1, "suspicious": 0, "undetected": 36 }, "detections": { "SOCRadar": "phishing" }, "reputation": 0, "tags": [ "dga" ], "registrar": "MAT BAO CORPORATION", "created": "2026-07-27T08:48:13Z", "expires": "2027-07-27T08:48:13Z", "updated": "2026-07-27T10:56:23Z", "first_seen": "2026-07-27T11:26:28Z", "dns": [ { "ttl": 300, "type": "A", "value": "104.21.16.83" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3033::6815:1053" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "alla.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::ac43:a6f5" }, { "ttl": 21600, "type": "NS", "value": "alla.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "fonzie.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.166.245" } ], "dns_at": "2026-10-29T08:36:35Z", "jarm": "27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6", "cert": { "san": [ "nexutebrillopro.com" ], "issuer": "Google Trust Services / WE1", "serial": "8c05d91c737ca0240ec229211fd8bfc7", "sha256": "786a147deef502aa9176803085d3e414a3abf85a221ded6812a218869c01b92c", "subject": "nexutebrillopro.com", "valid_to": "2026-12-28T05:17:35Z", "valid_from": "2026-09-29T04:17:39Z" }, "whois": { "registrar": "MAT BAO CORPORATION", "registrar_iana_id": "1586", "registrar_url": "http://www.matbao.net", "created": "2026-07-27T08:48:13Z", "updated": "2026-07-27T10:56:23Z", "expires": "2027-07-27T08:48:13Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "alla.ns.cloudflare.com", "fonzie.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "last changed": "2026-09-26T02:16:20Z", "registration": "2026-07-27T08:48:13Z", "registrar expiration": "2027-07-27T08:48:13Z", "last update of RDAP database": "2026-10-27T20:18:08Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-11-01T06:38:03Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "nexutebrillopro.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-11-01T06:08:58Z", "first": "2026-10-15T06:08:45Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.06, "avg_page_bytes": 42951 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://nexutebrillopro.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 140 }, "social_tags": { "ogUrl": "https://nexutebrillopro.com/", "title": "nexute brillo | AI Trading Platform | Official Homepage", "ogType": "website", "ogTitle": "nexute brillo | Elite AI-powered trading automation platform", "ogSiteName": "nexute brillo", "themeColor": "#f7f8fc", "description": "nexute brillo delivers a refined AI-driven trading automation suite for precise execution, robust risk governance, and real-time portfolio visibility, with ready-to-run bot workflows, secure onboarding, and crisp tooling.", "twitterCard": "summary", "canonicalUrl": "https://nexutebrillopro.com/", "ogDescription": "nexute brillo delivers a refined AI-driven trading automation suite for precise execution, robust risk governance, and real-time portfolio visibility, with ready-to-run bot workflows, secure onboarding, and crisp tooling." }, "trackers": { "requests": 19, "trackers": [ { "name": "Cloudflare", "company": "Cloudflare", "country": "US", "category": "Hosting", "requests": 8 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://static.cloudflare.com/beacon.min.js", "https://challenges.cloudflare.com/turnstile/v0/api.js", "https://cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js" ], "third_party_scripts": 3 }, "status": { "up": true, "code": 200, "timings": { "dns": 6, "tls": 22, "wait": 96, "connect": 8, "download": 13 }, "response_ms": 145 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 151888, "co2_grams": 0.0056, "cleaner_than": 13 }, "dns_server": { "ns": [ { "ip": "162.159.44.70", "host": "fonzie.ns.cloudflare.com" }, { "ip": "173.245.58.62", "host": "alla.ns.cloudflare.com" } ], "zone": "nexutebrillopro.com" }, "cookies": { "cookies": [ { "name": "entry_url", "secure": true, "same_site": "Lax" } ] }, "location": { "ip": "2606:4700:3033::6815:1053", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "nexutebrillopro.com" }, "dns": { "A": [ "172.67.166.245", "104.21.16.83" ], "NS": [ "alla.ns.cloudflare.com", "fonzie.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"alla.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418085998, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2606:4700:3033::6815:1053", "2606:4700:3037::ac43:a6f5" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=15552000; includeSubDomains; preload", "message": "HSTS max-age is 15552000, below the 31536000 minimum." }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": false, "permissionsPolicy": "camera=(), microphone=(), geolocation=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenge", "strictTransportPolicy": "max-age=15552000; includeSubDomains; preload", "crossOriginOpenerPolicy": "same-origin", "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3033::6815:1053", "family": 6 }, "redirects": { "chain": [ "https://nexutebrillopro.com" ] }, "linked_pages": { "internal_count": 39 }, "whois": { "registrar": "MAT BAO CORPORATION", "created": "2026-07-27T08:48:13Z", "updated": "2026-07-27T10:56:23Z", "expires": "2027-07-27T08:48:13Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "alla.ns.cloudflare.com", "fonzie.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=15552000; includeSubDomains; preload", "content-security-policy": "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net https://challenges.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: blob:; connect-src 'self' https://cloudflareinsights.com https://chal", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "no-referrer-when-downgrade", "permissions-policy": "camera=(), microphone=(), geolocation=()", "cross-origin-opener-policy": "same-origin" } } } } ```