# trevlico.cyou: Video Review Article Index and Topic Breakdowns | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/trevlico.cyou/
Machine-readable companion: https://phishdestroy.io/domain/trevlico.cyou/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: Unverified
- First observed by PhishDestroy: 2026-11-08 15:23:02 UTC
- Stored record updated: 2026-11-08 15:46:36 UTC
- VirusTotal detections in the stored snapshot: 14/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean

## Stored infrastructure

- Observed IP address: 81.180.92.199
- Registrar in stored WHOIS data: NameCheap, Inc.
- Last stored HTTP status: 200 (observed: not recorded)
- Registration date in stored WHOIS data: 2026-01-26 11:23:21 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/019fe0d1-25ab-70e2-89ec-6f91188aceb5/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/trevlico.cyou
- Certificate Transparency search: https://crt.sh/?q=%25.trevlico.cyou
- Web Archive lookup: https://web.archive.org/web/*/https://trevlico.cyou/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

PhishDestroy records the trevlico.cyou page as an index of articles based on video reviews, offering topic breakdowns, key takeaways and answers to common questions.

The captured trevlico.cyou page presents a minimal article index under the heading "trevlico.cyou" with the tagline "Articles based on video reviews: topic breakdowns, key takeaways and answers to common questions." The layout shows a light background with a horizontal divider separating the header from a footer line. The footer displays a copyright line reading "© 2026 TREVLICO.CYOU" alongside links labeled RSS, LLMS.TXT and SITEMAP. No article listings or additional page content appear below the header.

The stored VirusTotal domain result reports 14 detections out of 92 engines. CRDF reported "malicious"; DNS8 reported "suspicious".
Package revision: e31faecdf552053a16ef97007ce7211b389ef1962480e67aa05b8b50c4babea0
Text generated (not scan time): 2026-11-08 16:32:29
Reviewed evidence snapshot: {"domain":"trevlico.cyou","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"trevlico.cyou","final_host":"trevlico.cyou","redirects":[],"captured_at":"2026-11-08T15:29:50Z","uuid":"bfffb1b6-8072-4981-a117-f4468521fb36","report_url":"https://radar.cloudflare.com/scan/bfffb1b6-8072-4981-a117-f4468521fb36","sha256":"9e858bd44410608db42c20cfa3909de8cfc1a9f3aeeff5470bed223d46f00c2f","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","virustotal":{"scope":"domain","detections":14,"engines":92,"malicious":12,"suspicious":2,"analysis_date":"2026-10-18","retrieved_date":"2026-11-08","vendor_labels":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Fortinet":"phishing","SOCRadar":"phishing","Seclookup":"malicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"flagging_vendors":["CRDF","DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Fortinet","SOCRadar","Seclookup","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"]},"virustotal_public_summary":"The stored VirusTotal domain result reports 14 detections out of 92 engines. CRDF reported \"malicious\"; DNS8 reported \"suspicious\".","page_paragraph_target_characters":547}
Source facts (timestamps as stored): {"record_id":1860466,"first_recorded_at":"2026-11-08 16:23:02","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":14,"denominator":92,"malicious":12,"suspicious":2,"vendors":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Fortinet":"phishing","SOCRadar":"phishing","Seclookup":"malicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-18T07:42:35Z","checked_at":null,"fetched_at":"2026-11-08T15:27:06Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":14,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","CRDF","CyRadar","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Lionic","Seclookup","SOCRadar","Sophos","VIPRE"],"observed_at":"2026-10-18 07:42:35","checked_at":"2026-11-08 16:27:07","fetched_at":"2026-11-08 15:27:07","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"CRDF":"malicious","DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Fortinet":"phishing","SOCRadar":"phishing","Seclookup":"malicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"vendor_names":["CRDF","DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Fortinet","SOCRadar","Seclookup","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":46,"malicious":12,"suspicious":2,"undetected":32}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-08 16:28:59"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-08 16:31:11"},"availability":{"state":"unknown","label_key":"availability.unverified","detail_key":"detail.no_response","params":[],"source":"current_http_probe","record_id":1860466,"scope":"checked_url","observed_at":null,"http_status":200,"http_observed_at":null,"stored_http_code":200,"stored_http_observed_at":null,"legacy_site_status":"unknown","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}}

## Stored page captures

- URLScan · 2026-08-08: https://screenshots.phishdestroy.io/us/019fe0d1-25ab-70e2-89ec-6f91188aceb5.png
  Captured: 2026-08-08 10:01:08 UTC
  Source report: https://urlscan.io/result/019fe0d1-25ab-70e2-89ec-6f91188aceb5/
  SHA-256: 289f290e342ef5129577a5620009ee4ca054539f5fc40c9496664ad5e37d208f
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/bfffb1b6-8072-4981-a117-f4468521fb36.png
  Captured: 2026-11-08 15:29:50 UTC
  Source report: https://radar.cloudflare.com/scan/bfffb1b6-8072-4981-a117-f4468521fb36
  SHA-256: 9e858bd44410608db42c20cfa3909de8cfc1a9f3aeeff5470bed223d46f00c2f

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-11-08T15:26:53Z",
        "uuid": "019fe0d1-25ab-70e2-89ec-6f91188aceb5",
        "scanned_at": "2026-08-08T10:01:08Z",
        "final_url": "https://trevlico.cyou/",
        "status": 403,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://trevlico.cyou/",
                "from": "http://trevlico.cyou/",
                "status": 307
            }
        ],
        "ip": "172.67.161.106",
        "domains": [
            "challenges.cloudflare.com"
        ],
        "ips": [
            "104.18.95.41",
            "104.18.94.41",
            "172.67.161.106"
        ],
        "asns": [
            "13335"
        ],
        "link_domains": [
            "www.cloudflare.com"
        ],
        "doc_hash": "d4dcae60dc7416a140f2cd0b1c6383a3e553dd8c942637fefb7092c302e6c694",
        "script_hashes": [
            "68b384adc17d3d9ae1068ca97eec75b0a23fecaab39e3c1350920aa746a9f9e6"
        ],
        "globals": [
            "onTurnstileSuccess",
            "_cf_translation",
            "turnstile",
            "singleSelectors",
            "groupSelectors"
        ],
        "cookies": [
            "cf_clearance"
        ],
        "tls": {
            "san": [
                "trevlico.cyou",
                "*.trevlico.cyou"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "trevlico.cyou",
            "protocol": "QUIC",
            "valid_to": "2026-10-20T15:25:40Z",
            "valid_from": "2026-07-22T14:25:43Z"
        },
        "domain_age_days": 193,
        "apex_age_days": 193,
        "tls_age_days": 16,
        "tls_valid_days": 90,
        "requests": 8,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "genericcloudflare"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Generic Cloudflare"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8",
            "x-frame-options": "SAMEORIGIN",
            "referrer-policy": "same-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-11-08T15:32:04Z",
        "uuid": "bfffb1b6-8072-4981-a117-f4468521fb36",
        "scanned_at": "2026-11-08T15:29:50Z",
        "final_url": "https://trevlico.cyou/",
        "status": 200,
        "history": [
            {
                "url": "https://trevlico.cyou/",
                "status": 200
            }
        ],
        "dom_hash": "4c2b00079e270a285a071a8485cf4f228bdced9eaf324ca4bef805d934af33e1",
        "doc_hash": "2d565b446048d16032d434a11ab0b5f7990840a054e2d585a416033605198a87",
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "trevlico.cyou",
                "type": "A",
                "value": "81.180.92.199"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.24",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "NameCheap, Inc.",
            "created": "2026-01-26T12:23:21Z",
            "updated": "2026-02-01T10:36:42Z",
            "expires": "2027-01-26T23:59:59Z",
            "nameservers": [
                "aliza.ns.cloudflare.com",
                "darwin.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-11-08T15:27:06Z",
        "analysis_at": "2026-10-18T07:42:35Z",
        "stats": {
            "timeout": 0,
            "harmless": 46,
            "malicious": 12,
            "suspicious": 2,
            "undetected": 32
        },
        "detections": {
            "CRDF": "malicious",
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Seclookup": "malicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "created": "2026-01-26T00:00:00Z",
        "updated": "2026-01-26T00:00:00Z",
        "first_seen": "2026-01-26T13:04:00Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "aliza.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "walt.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "aliza.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-18T07:47:51Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "trevlico.cyou",
                "*.trevlico.cyou"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "c27bd23cc08f49f00ec94f520cd03dee",
            "sha256": "19b47c254049deb45e34879fe4163a95ca9382df837accea3b1043c0be14ee0c",
            "subject": "trevlico.cyou",
            "valid_to": "2026-10-20T15:25:40Z",
            "valid_from": "2026-07-22T14:25:43Z"
        },
        "rdap": {
            "status": [
                "client transfer prohibited",
                "server transfer prohibited",
                "add period"
            ],
            "events": {
                "registration": "2026-01-26T12:23:21Z",
                "registrar expiration": "2027-01-26T12:23:21Z",
                "last update of RDAP database": "2026-01-26T12:49:26Z"
            },
            "registrar": "NAMECHEAP INC",
            "registrar_iana_id": "1068"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-11-08T15:27:23Z",
        "mail_config": {
            "mx": [
                "mail.trevlico.cyou"
            ],
            "spf_lookups": 0
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "robots_txt": {
            "agents": [
                "*",
                "GPTBot",
                "OAI-SearchBot",
                "ChatGPT-User",
                "ClaudeBot"
            ],
            "present": true,
            "llms_txt": true,
            "sitemaps": [
                "https://trevlico.cyou/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 1
        },
        "social_tags": {
            "ogUrl": "https://trevlico.cyou/",
            "title": "trevlico.cyou",
            "ogType": "website",
            "robots": "index,follow,max-image-preview:large,max-snippet:-1,max-video-preview:-1",
            "ogTitle": "trevlico.cyou",
            "ogSiteName": "trevlico.cyou",
            "description": "Articles based on video reviews: topic breakdowns, key takeaways and answers to common questions.",
            "twitterCard": "summary",
            "canonicalUrl": "https://trevlico.cyou/",
            "ogDescription": "Articles based on video reviews: topic breakdowns, key takeaways and answers to common questions."
        },
        "trackers": {
            "requests": 3
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 30,
                "tls": 60,
                "wait": 34,
                "connect": 33,
                "download": 0
            },
            "response_ms": 157
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 6389,
            "co2_grams": 0.0002,
            "cleaner_than": 81
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "173.245.59.148",
                    "host": "walt.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.38.55",
                    "host": "aliza.ns.cloudflare.com"
                }
            ],
            "zone": "trevlico.cyou"
        },
        "location": {
            "ip": "81.180.92.199",
            "asn": "200019",
            "org": "Alexhost S.R.L.",
            "city": "Bucharest",
            "country": "RO"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "trevlico.cyou"
        },
        "dns": {
            "A": [
                "81.180.92.199"
            ],
            "MX": [
                "{\"exchange\": \"mail.trevlico.cyou\", \"priority\": 1}"
            ],
            "NS": [
                "walt.ns.cloudflare.com",
                "aliza.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"aliza.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418638210, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "81.180.92.199",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://trevlico.cyou"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Ubuntu",
                "Nginx",
                "RSS",
                "Open Graph"
            ]
        },
        "linked_pages": {
            "internal_count": 3
        },
        "whois": {
            "registrar": "NameCheap, Inc.",
            "created": "2026-01-26T12:23:21Z",
            "updated": "2026-02-01T10:36:42Z",
            "expires": "2027-01-26T23:59:59Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "aliza.ns.cloudflare.com",
                "darwin.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "nginx/1.24.0 (Ubuntu)",
                "content-type": "text/html; charset=utf-8"
            }
        }
    }
}
```
Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/cf/bfffb1b6-8072-4981-a117-f4468521fb36.png","source":"Cloudflare Radar","report_url":"https://radar.cloudflare.com/scan/bfffb1b6-8072-4981-a117-f4468521fb36","captured_at":"2026-11-08T15:29:50Z","sha256":"9e858bd44410608db42c20cfa3909de8cfc1a9f3aeeff5470bed223d46f00c2f","model_image_sha256":"94980fc3a8e7a3d2969c09cce1b7d94692e45091a3e4d9a0ab19b3038782e81a","available":true,"content_status":null}

## Complete dated records
Availability observations: https://phishdestroy.io/domain/trevlico.cyou/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/trevlico.cyou/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/trevlico.cyou/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/trevlico.cyou/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/trevlico.cyou/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/trevlico.cyou/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/trevlico.cyou/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/trevlico.cyou/records.json?source=content&format=json

## Dated availability observation
No conclusive current response is stored
```json
{
    "state": "unknown",
    "label_key": "availability.unverified",
    "detail_key": "detail.no_response",
    "params": [],
    "source": "current_http_probe",
    "record_id": 1860466,
    "scope": "checked_url",
    "observed_at": null,
    "http_status": 200,
    "http_observed_at": null,
    "stored_http_code": 200,
    "stored_http_observed_at": null,
    "legacy_site_status": "unknown",
    "supports_outcome_badge": false,
    "content_classification": "unknown",
    "content_classification_at": null,
    "registration_state": "unknown",
    "policy": "20261102-dated-availability-v2"
}
```