# psyrusec.com — Recorded security evidence | PhishDestroy
Content language: English
Canonical HTML report: https://phishdestroy.io/domain/psyrusec.com/
Machine-readable companion: https://phishdestroy.io/domain/psyrusec.com/llm.txt
## Summary
PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.
## Stored observations
- Listed by PhishDestroy: yes
- Availability at last stored check: Last known active
- First observed by PhishDestroy: 2026-11-02 07:41:34 UTC
- Selected availability observation: 2026-11-02T07:41:34Z
- Stored record updated: 2026-11-02 09:35:19 UTC
- VirusTotal detections in the stored snapshot: 14/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean
## Stored infrastructure
- Observed IP address: 50.31.174.181
- Registrar in stored WHOIS data: NameSilo, LLC
- Last stored HTTP status: 200 (observed: 2026-11-02T07:41:34Z)
- Registration date in stored WHOIS data: 2025-03-19 22:17:09 UTC
## Evidence links
- URLScan report: https://urlscan.io/result/01a19b32-fb7b-721d-9646-4e4aeca7d96d/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/psyrusec.com
- Certificate Transparency search: https://crt.sh/?q=%25.psyrusec.com
- Web Archive lookup: https://web.archive.org/web/*/https://psyrusec.com/
## Corrections
- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq
## Public report package
PhishDestroy stores a record for psyrusec.com. Source observations are dated separately; missing checks do not establish safety.
PhishDestroy stores a record for psyrusec.com. Source observations are dated separately; missing checks do not establish safety.
A reviewed analysis is not available for this text revision. Consult the dated source records below.
Package revision: 42810696e265ae6cea6f374611f485c1d7cd0259da92fb7ae5b2657b828a24bb
Source facts (timestamps as stored): {"record_id":1741614,"first_recorded_at":"2026-11-02 08:41:34","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":14,"denominator":92,"malicious":14,"suspicious":0,"vendors":{"CRDF":"malicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","Certego":"phishing","Fortinet":"phishing","SOCRadar":"phishing","Seclookup":"malicious","Gridinsoft":"phishing","SafeToOpen":"phishing","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-11-02T00:21:20Z","checked_at":null,"fetched_at":"2026-11-02T09:19:11Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":14,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","Certego","CRDF","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Lionic","SafeToOpen","Seclookup","SOCRadar","Sophos","VIPRE"],"observed_at":"2026-11-02 00:21:20","checked_at":"2026-11-02 10:19:17","fetched_at":"2026-11-02 09:19:18","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"CRDF":"malicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","Certego":"phishing","Fortinet":"phishing","SOCRadar":"phishing","Seclookup":"malicious","Gridinsoft":"phishing","SafeToOpen":"phishing","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"vendor_names":["CRDF","VIPRE","G-Data","Lionic","Sophos","Certego","Fortinet","SOCRadar","Seclookup","Gridinsoft","SafeToOpen","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":48,"malicious":14,"suspicious":0,"undetected":30}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-02 10:19:36"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":null},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1741614,"scope":"checked_url","observed_at":"2026-11-02T07:41:34Z","http_status":200,"http_observed_at":"2026-11-02T07:41:34Z","stored_http_code":200,"stored_http_observed_at":"2026-11-02T07:41:34Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}}
## Stored page captures
- URLScan · 2026-11-02: https://screenshots.phishdestroy.io/us/01a19b32-fb7b-721d-9646-4e4aeca7d96d.png
Captured: 2026-11-02 07:40:08 UTC
Source report: https://urlscan.io/result/01a19b32-fb7b-721d-9646-4e4aeca7d96d/
SHA-256: 9b423f020732d49d71d8c1cf0bd635bb3207ce49c68e998828be58db98ec8cc7
- URLScan · 2026-09-24 → wildlands.acltci.com: https://screenshots.phishdestroy.io/us/01a0d0ef-8e80-74fa-9f1d-7f3cba367658.png
Captured: 2026-09-24 01:02:45 UTC
Source report: https://urlscan.io/result/01a0d0ef-8e80-74fa-9f1d-7f3cba367658/
SHA-256: 71a86d685f5074d52a548d874b875c5d8dd85a7a35037429f9b1153dd1c19cfc
- URLScan · 2026-09-24 → wildlands.acltci.com: https://screenshots.phishdestroy.io/us/01a0d342-d430-7229-8eda-3e9acad769e2.png
Captured: 2026-09-24 11:52:55 UTC
Source report: https://urlscan.io/result/01a0d342-d430-7229-8eda-3e9acad769e2/
SHA-256: 6d7ac43f31ae3d09e79575989ebfadfaf02c204fe96c6d92a5d622a618376185
- URLScan · 2026-10-09: https://screenshots.phishdestroy.io/us/01a11f74-e8b1-74f2-a6e7-ef2e6f998719.png
Captured: 2026-10-09 06:58:47 UTC
Source report: https://urlscan.io/result/01a11f74-e8b1-74f2-a6e7-ef2e6f998719/
SHA-256: a7abba550cc9f594a37dc64fe1822fccaf4081fdcf769eb374b73a3a241ebdc9
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16218-f1c7-70e8-a7f5-026b7d7a841b.png
Captured: 2026-10-22 05:32:59 UTC
Source report: https://urlscan.io/result/01a16218-f1c7-70e8-a7f5-026b7d7a841b/
SHA-256: 1a5a0073e903b8ec101ccdf8b3a78b0af395160fe93132b9399e7b7b34f74162
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1630f-431e-74c7-99d9-59652cdc56d7.png
Captured: 2026-10-22 10:02:26 UTC
Source report: https://urlscan.io/result/01a1630f-431e-74c7-99d9-59652cdc56d7/
SHA-256: 4ad417914b0de226015256fd4c6c761476752395e56c0567e678fef9ae1c240f
- URLScan · 2026-11-02: https://screenshots.phishdestroy.io/us/01a19b07-c60d-70c9-9b7b-a0772ac422e2.png
Captured: 2026-11-02 06:52:50 UTC
Source report: https://urlscan.io/result/01a19b07-c60d-70c9-9b7b-a0772ac422e2/
SHA-256: e734537f0151efce35d45b114daa75da0c52cdf75bff116d4b8c4b387a825c08
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/539b03bb-b8ac-4e14-a8fc-04a3882745db.png
Captured: 2026-11-02 08:15:19 UTC
Source report: https://radar.cloudflare.com/scan/539b03bb-b8ac-4e14-a8fc-04a3882745db
SHA-256: af6b504724d4af16a5f8af57732307c2eaac0cc18acfcac353bb7e4e0e70b320
## Collected source observations
Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
"urlscan": {
"v": 1,
"fetched_at": "2026-11-02T07:42:29Z",
"uuid": "01a19b32-fb7b-721d-9646-4e4aeca7d96d",
"scanned_at": "2026-11-02T07:40:08Z",
"final_url": "http://psyrusec.com/",
"status": 200,
"redirects": [
{
"to": "https://psyrusec.com/",
"from": "http://psyrusec.com/",
"status": 307
},
{
"to": "http://psyrusec.com/",
"from": "https://psyrusec.com/",
"status": 307
}
],
"ip": "50.31.174.181",
"ptr": "priva10.privatednsorg.com",
"domains": [
"fonts.gstatic.com",
"www.google.com",
"s.w.org",
"run.wemanage.app",
"www.google.ca",
"ad.doubleclick.net",
"googleads.g.doubleclick.net",
"www.googletagmanager.com",
"fonts.googleapis.com"
],
"ips": [
"192.0.77.48",
"103.95.119.36",
"172.253.139.94",
"172.253.122.149",
"142.251.150.119",
"192.178.218.156",
"142.251.163.94",
"64.233.180.97",
"142.251.167.95",
"50.31.174.181"
],
"asns": [
"2635",
"49157",
"15169",
"23352"
],
"countries": [
"US",
"IL"
],
"link_domains": [
"www.facebook.com",
"www.instagram.com",
"cliente.pcursos.firulaistudio.com"
],
"social": [
"https://www.facebook.com/psyrusacademy",
"https://www.instagram.com/psyrus_academy"
],
"doc_hash": "12869e43187cbcb6d8b5e834ba39f5740fd8b7b36d1e13ca034f062973dfe801",
"script_hashes": [
"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf",
"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89",
"dfdc07b742e9cc654aac7c68ebbcfaa14ec071aa8fe11c206797b8f9ce1aecb6",
"2137c4e292448183917a4ede265d546ab578e8ebd600b9922c44ac08f02c92f5",
"d151f8c0b2659cfb63704d68654ad8d9437ae9da4410536f63ddec21689a0620",
"fca8dd4ee9c93f33dc3149e2c78aec8a28c54036faaf19c7b0ac9ca32293c070",
"8b083f64f2e9e8ac445c730dfce7013cc6449ce155fd1c2f42b60edba4ecb4b1",
"638fbb64dd1a2f5a87654780b7225d2392add167f2670b1f70f669de4dd5dc31",
"eaf12bd0a3137b7f7b5a9a42a5aeb6045ea7b7a8ccb0caced43cf0654d1b1cac",
"abddba00218c69f6efa84420493eea28fdb45bd10a64d809d9772c788abca716"
],
"globals": [
"dataLayerPYS",
"pys_datalayer_name",
"jQuery",
"xoo_aff_localize",
"wc_add_to_cart_params",
"Cookies",
"KushkiKFormCheckout",
"bind",
"DOMPurify",
"moment",
"wc_country_select_params",
"gtag",
"_googlesitekit",
"tutorElementorData",
"loftloaderProProgressInit",
"init",
"percentageStyles",
"LoftLoaderProGlobalSessionStorage",
"loftloaderProInsertStyle",
"loftloaderProWaitForMediaSettings",
"google_tag_data",
"google_tag_manager",
"GooglebQhCsO",
"loftloaderPro",
"xoo_el_localize",
"_self",
"Prism",
"wp",
"tutor_toast",
"React",
"ReactDOM",
"_tutorobject",
"tutorAccordion",
"tutor_get_nonce_data",
"tutor_popup",
"tutor_date_picker",
"tutor_esc_html",
"tutor_esc_attr",
"quicktagsL10n",
"edButtons"
],
"cookies": [
"googtrans",
"PHPSESSID",
"_gcl_au",
"test_cookie",
"sbjs_migrations",
"sbjs_current_add",
"sbjs_first_add",
"sbjs_current",
"sbjs_first",
"sbjs_udata",
"sbjs_session",
"nouvello_unique_visitor"
],
"storage_keys": [
"_gcl_ls",
"elementor",
"wpEmojiSettingsSupports",
"wwsAutoPopup"
],
"domain_age_days": 592,
"apex_age_days": 592,
"requests": 255,
"verdicts": {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 94,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
},
"headers": {
"server": "LiteSpeed",
"content-type": "text/html; charset=UTF-8",
"link": "; rel=\"https://api.w.org/\"\n; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\"\n; rel=shortlink"
}
},
"cf": {
"v": 1,
"fetched_at": "2026-11-02T08:16:37Z",
"uuid": "539b03bb-b8ac-4e14-a8fc-04a3882745db",
"scanned_at": "2026-11-02T08:15:19Z",
"final_url": "https://psyrusec.com/",
"status": 200,
"history": [
{
"url": "https://psyrusec.com/",
"status": 200
}
],
"dom_hash": "eae5a8c567a1a969615367ec6cde096ec77801d71f4f616af53ba09c050085f1",
"doc_hash": "42bab127fe52f863389ed4d53b0afb657f38f7d003c3c3d90806619aba1a2f9f",
"domain_risks": [
"Education"
],
"radar_rank": {
"bucket": ">200000"
},
"dns": [
{
"name": "psyrusec.com",
"type": "A",
"value": "50.31.174.181"
}
],
"dnssec_valid": false,
"ip": "127.0.1.27",
"whois": {
"registrar": "NameSilo, LLC",
"created": "2025-03-19T23:17:09Z",
"updated": "2026-04-17T19:39:49Z",
"expires": "2027-03-19T23:17:09Z",
"nameservers": [
"ns1.firulaistudio.com",
"ns2.firulaistudio.com"
]
}
},
"vt": {
"v": 1,
"fetched_at": "2026-11-02T09:19:11Z",
"analysis_at": "2026-11-02T00:21:20Z",
"stats": {
"timeout": 0,
"harmless": 48,
"malicious": 14,
"suspicious": 0,
"undetected": 30
},
"detections": {
"CRDF": "malicious",
"VIPRE": "phishing",
"G-Data": "phishing",
"Lionic": "phishing",
"Sophos": "phishing",
"Certego": "phishing",
"Fortinet": "phishing",
"SOCRadar": "phishing",
"Seclookup": "malicious",
"Gridinsoft": "phishing",
"SafeToOpen": "phishing",
"BitDefender": "phishing",
"alphaMountain.ai": "phishing",
"Forcepoint ThreatSeeker": "phishing"
},
"reputation": 0,
"registrar": "NameSilo, LLC",
"created": "2025-03-19T23:17:09Z",
"expires": "2027-03-19T23:17:09Z",
"updated": "2026-04-17T19:39:49Z",
"first_seen": "2025-03-20T07:14:24Z",
"dns": [
{
"ttl": 14400,
"type": "MX",
"value": "psyrusec.com",
"priority": 0
},
{
"ttl": 8750,
"type": "A",
"value": "50.31.174.181"
},
{
"ttl": 21600,
"type": "NS",
"value": "ns2.firulaistudio.com"
},
{
"ttl": 21600,
"type": "SOA",
"rname": "buen\\.chico.firulaistudio.com",
"value": "ns1.firulaistudio.com"
},
{
"ttl": 21600,
"type": "NS",
"value": "ns1.firulaistudio.com"
}
],
"dns_at": "2026-11-02T00:21:54Z",
"jarm": "29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae",
"cert": {
"san": [
"*.psyrusec.com",
"psyrusec.com"
],
"issuer": "Let's Encrypt / YR1",
"serial": "683171341aaeb43bee7cad61051c5371439",
"sha256": "11756e0ede40e16201b5814787db19b8a2e91bf8f48a81ba402a1b20e577ee9c",
"subject": "*.psyrusec.com",
"valid_to": "2027-01-15T23:15:43Z",
"valid_from": "2026-10-17T23:15:44Z"
},
"whois": {
"registrar": "NameSilo, LLC",
"registrar_iana_id": "1479",
"registrar_url": "http://www.namesilo.com",
"created": "2025-03-19T23:17:09Z",
"updated": "2026-04-17T19:39:49Z",
"expires": "2027-03-19T23:17:09Z",
"status": [
"clientTransferProhibited"
],
"nameservers": [
"ns1.firulaistudio.com",
"ns2.firulaistudio.com"
],
"dnssec": "unsigned"
},
"rdap": {
"status": [
"client transfer prohibited"
],
"events": {
"last changed": "2026-10-26T13:56:07Z",
"registration": "2025-03-19T00:00:00Z",
"registrar expiration": "2027-03-19T00:00:00Z",
"last update of RDAP database": "2026-11-02T00:21:54Z"
}
}
},
"webcheck": {
"v": 1,
"fetched_at": "2026-11-02T07:56:39Z",
"mail_config": {
"mx": [
"psyrusec.com"
],
"dkim": [
"default"
],
"dkim_bits": 2048,
"spf_lookups": 0
},
"caa_records": {
"domain": "psyrusec.com"
},
"block_lists": {
"resolvers": 12,
"blocked_count": 0
},
"archives": {
"last": "2026-11-02T07:43:31Z",
"first": "2025-03-20T07:02:54Z",
"changes": 1,
"days_archived": 2,
"scans_per_day": 0,
"avg_page_bytes": 51550
},
"robots_txt": {
"agents": [
"*"
],
"present": true,
"sitemaps": [
"https://psyrusec.com/wp-sitemap.xml"
]
},
"social_tags": {
"title": "Psyrus Academy",
"robots": "max-image-preview:large",
"generator": "WordPress 7.1.4",
"canonicalUrl": "https://psyrusec.com/"
},
"trackers": {
"requests": 0
},
"mixed_content": {
"third_party_scripts": 0
},
"status": {
"up": true,
"code": 200,
"timings": {
"dns": 200,
"tls": 111,
"wait": 130,
"connect": 107,
"download": 433
},
"response_ms": 981
},
"tls_connection": {
"alpn": "h2",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
},
"ports": {
"open": [
21,
25,
53,
80,
110,
143,
443,
587,
993,
995,
3306,
8888
]
},
"carbon": {
"bytes": 409824,
"co2_grams": 0.015,
"cleaner_than": 1
},
"dns_server": {
"ns": [
{
"ip": "50.31.174.181",
"host": "ns1.firulaistudio.com"
},
{
"ip": "50.31.174.181",
"host": "ns2.firulaistudio.com"
}
],
"zone": "psyrusec.com"
},
"location": {
"ip": "50.31.174.181",
"asn": "23352",
"org": "DEFT.COM",
"city": "Chicago",
"country": "US"
},
"ssl": {
"issuer": "Let's Encrypt / YR1",
"subject": "*.psyrusec.com"
},
"dns": {
"A": [
"50.31.174.181"
],
"MX": [
"{\"exchange\": \"psyrusec.com\", \"priority\": 0}"
],
"NS": [
"ns1.firulaistudio.com",
"ns2.firulaistudio.com"
],
"SOA": "{\"nsname\": \"ns1.firulaistudio.com\", \"hostmaster\": \"buen\\\\.chico.firulaistudio.com\", \"serial\": 2026101801, \"refresh\": 86400, \"retry\": 7200, \"expire\": 1600000, \"minttl\": 86400}"
},
"dnssec": {
"ds": false,
"rrsig": false,
"dnskey": false
},
"hsts": {
"message": "Site does not serve any HSTS headers."
},
"http_security": {
"xFrameOptions": false,
"referrerPolicy": false,
"xXSSProtection": false,
"permissionsPolicy": false,
"xContentTypeOptions": false,
"contentSecurityPolicy": false,
"strictTransportPolicy": false,
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
},
"get_ip": {
"ip": "50.31.174.181",
"family": 4
},
"redirects": {
"chain": [
"https://psyrusec.com"
]
},
"linked_pages": {
"external": [
"https://www.instagram.com/psyrus_academy/",
"https://www.facebook.com/psyrusacademy",
"https://cliente.pcursos.firulaistudio.com/"
],
"external_count": 3,
"internal_count": 53
},
"whois": {
"registrar": "NameSilo, LLC",
"created": "2025-03-19T23:17:09Z",
"updated": "2026-04-17T19:39:49Z",
"expires": "2027-03-19T23:17:09Z",
"status": [
"clientTransferProhibited https://icann.org/epp"
],
"nameservers": [
"ns1.firulaistudio.com",
"ns2.firulaistudio.com"
]
},
"headers": {
"headers": {
"server": "LiteSpeed",
"content-type": "text/html; charset=UTF-8"
}
}
}
}
```
## Complete dated records
Availability observations: https://phishdestroy.io/domain/psyrusec.com/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/psyrusec.com/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/psyrusec.com/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/psyrusec.com/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/psyrusec.com/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/psyrusec.com/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/psyrusec.com/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/psyrusec.com/records.json?source=content&format=json
## Dated availability observation
Latest stored reachability observation
```json
{
"state": "alive",
"label_key": "availability.active",
"detail_key": "detail.latest_reachability",
"params": [],
"source": "current_http_probe",
"record_id": 1741614,
"scope": "checked_url",
"observed_at": "2026-11-02T07:41:34Z",
"http_status": 200,
"http_observed_at": "2026-11-02T07:41:34Z",
"stored_http_code": 200,
"stored_http_observed_at": "2026-11-02T07:41:34Z",
"legacy_site_status": "alive",
"supports_outcome_badge": false,
"content_classification": "unknown",
"content_classification_at": null,
"registration_state": "unknown",
"policy": "20261102-dated-availability-v2"
}
```