psecuonline[.]icu

Analysis of the domain psecuonline.icu shows that it was registered on July 22, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently hosted on Cloudflare infrastructure, using the nameservers asa.ns.cloudflare.com and margo.ns.cloudflare.com. DNS resolution points to the IP address 172.67.148.163, a Cloudflare edge node that is commonly leveraged for fast content delivery and, in malicious campaigns, for obscuring the true origin of traffic. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service, indicating that at least one reputable anti‑phishing feed has identified it as malicious.

VirusTotal records reveal that the domain was examined by 91 scanning engines, with none reporting a detection at the time of the scan; this absence of detections does not constitute a safety assurance, as the lack of signatures may reflect limited exposure rather than benign behavior. No public information on SSL certificate details, HTTP response codes, or page titles is available, leaving the surface‑web characteristics of the site unverified. Given the recent creation date, the association with a known phishing blocklist, and the use of Cloudflare’s anonymizing services, defenders should treat psecuonline.icu as high‑risk.

Recommended actions include adding the domain to internal blocklists, monitoring DNS queries for the associated IP, and employing URL filtering solutions that reference up‑to‑date phishing intelligence feeds. Continuous re‑evaluation is advised, as additional detections or content analysis could further clarify the threat profile.