psgiran[.]news

Analysis of psgiran.news indicates active generic phishing infrastructure. The domain is secured with a Google Trust Services / WE1 SSL certificate, suggesting use of legitimate certificate authorities to increase credibility. DNS resolution points to Cloudflare IP 104.21.83.120, located in Canada, and the authoritative nameservers are elisabeth.ns.cloudflare.com and jaxson.ns.cloudflare.com, both Cloudflare‑managed. HTTP requests receive a 301 redirect, a common technique to obscure the final landing page. Registration was performed through NameCheap, Inc., and the domain appears on a single security blocklist. It has been cited in three AlienVault OTX threat‑intel pulses and is currently blocked by the PhishDestroy feed. No public malware detections have been reported, but the absence of detections does not confirm safety. While the specific brand or service being spoofed has not been identified, the observed indicators align with typical phishing staging. Defenders should add the domain to network deny lists, monitor outbound connections to the associated Cloudflare IP, and enforce URL filtering for any redirects originating from the domain. Continuous re‑evaluation is advised as additional content or victim reports become available.