Phishing
This site is classified as Phishing based on multiple risk signals, including 12 blacklist detections, no established public user-review history, and phishing-related signals. These risks are driven by active warning signals despite the site's longer domain history.
Trust signal radarNormalized trust signals for xpsecsecurity.ioDomain Maturity: 930 daysDomain MaturityWarning Cleanliness: 12 detectionsWarningCleanlinessSafety Level: 4 negative tagsSafetyLevelPositive Signals: 5 positive signalsPositiveSignalsPopularity: Estimated from social profiles: YouTube, LinkedInPopularityTrust Zone: .ioTrust ZoneOperational Signals: 3 detected servicesOperationalSignalsLocation Credibility: Hosting country BRLocation Credibility
Figure 1. Trust signal radar for xpsecsecurity.io. Larger shaded area indicates stronger trust signals.
How we scored xpsecsecurity.io
On-page mentions:
Cybersecurity
Tech signals:
React Platform, Next.js Framework, GitHub Profile, Strong Community Presence
Negative signals:
security-provider warnings
multiple malware or phishing blacklist detections (12)
content related to cybersecurity tools for malware and phishing defense
Last checked July 15, 2026 at 6:37 PM by
Gridinsoft Trust Model v2.5.0
Share this report?
What is Xpsecsecurity?
We flagged Xpsecsecurity.io as phishing. The page behavior matches a common credential-theft flow: impersonation first, urgency second, data request last.
Typical prompts on sites like this include account alerts, failed-delivery notices, or "verify now" dialogs asking for passwords, card numbers, or one-time codes. Do not submit credentials here. Open the real service in a new tab and check your account directly.
Figure 2.
Website screenshot for Xpsecsecurity.io.
2026-07-15 21:37:40
🚨
Gridinsoft blocks this website because it was classified as phishing.
xpsecsecurity.io should not be treated as a safe website. Gridinsoft gives it a 1/100 trust score, and multiple security vendors blacklist the domain. Avoid entering passwords, personal details, or payment data.
Why is xpsecsecurity.io marked "Phishing"?
Gridinsoft evaluates xpsecsecurity.io, focusing on limited website popularity, suspicious content indicators (Blacklisted by Security Providers, Phishing - High Risk, Heuristic - Scam), hosting technology and infrastructure, SSL certificate status, website reputation across multiple databases, customer reviews from various independent platforms. We weigh these indicators to calculate the trust score.
Note: Automated systems are not perfect — while the evidence suggests risk, there is still a chance the site is legitimate. We recommend you check the website using detailed analysis or by contacting the company directly through verified channels.
A structured view of the site's detected themes, page signals, and related online footprint elements.
Cybersecurity
React Platform
This website is built using React, a popular JavaScript library for creating interactive user interfaces.
Google Tag Manager
This website uses Google Tag Manager to add and update tracking tags on its website.
Next.js Framework
Social Media Links
The presence of social media links on the website indicates that it references social media accounts. This signal alone does not confirm ownership or authenticity of those profiles.
Blacklisted by Security Providers
Security Alert: Several security scanners have marked this site as unsafe. The site shows signs of potentially harmful activity, such as malware or phishing, which may put users at risk (Warning Summary).
GitHub Profile
This site links to a GitHub profile or public repository associated with the project. This is a useful transparency signal, especially when the account has public activity.
Phishing - High Risk
The xpsecsecurity.io website exhibits strong similarities to known phishing operations designed to impersonate trusted entities and steal user credentials, payment information, or personal data. Exercise extreme caution when interacting with xpsecsecurity.io and avoid entering sensitive information.
Heuristic - Scam
Heuristic Risk
Verified X Profile
Ownership verification confirms that this site controls the X profile @xpsecsecurity (XPSec Security) (0 followers, 2 following, 0 posts, listed 0 times, since 2025, no account badge).
Verified YouTube Channel
Ownership verification confirms that this site controls the YouTube channel XPSec Security (@xpsecsecurity) (1,750 subscribers, 49 videos, 53,500 total views, since 2019, country: BR).
Verified LinkedIn Page
Ownership verification confirms that xpsecsecurity.io controls the LinkedIn page XPSec Security (1,454 followers, 5 LinkedIn employees, company size 2-10 employees, founded 2019, industry: Computer and Network Security, headquarters: São Paulo, SP).
Verified Business Services
This domain publishes TXT verification records for multiple third-party business platforms. This indicates that the domain has been connected to those services at the DNS level.
Business Infrastructure
This domain is configured for several service layers, such as email delivery, platform verification, or security tooling. This reflects a broader operational setup than a minimal single-purpose deployment.
Strong Community Presence
xpsecsecurity.io has ownership-verified social or community presence with substantial audience reach.
Provider warnings: 12/30 Phishing
This section shows what trusted security sources say about this site.
A warning appears when one or more sources report malware, phishing, abuse, or other safety concerns. Each row shows the source and its verdict.
If no source reports a warning, the site is shown as clear in this section.
ADMINUSLabs
Malicious
alphaMountain.ai
Phishing
Chong Lua Dao
Malicious
CRDF
Malicious
CyRadar
Phishing
G-Data
Phishing
Kaspersky
Phishing
Lionic
Phishing
Sophos
Phishing
Webroot
Malicious
BitDefender
Warned
ESET
Suspicious
BBB
Clean
Google Safebrowsing
Clean
Fortinet
Clean
Dr.Web
Clean
Forcepoint ThreatSeeker
Clean
Quick Heal
Clean
Phishing Database
Clean
Phishtank
Clean
OpenPhish
Clean
Netcraft
Clean
Sucuri SiteCheck
Clean
Criminal IP
Clean
URLhaus
Clean
Emsisoft
Clean
Spam404
Clean
Trustwave
Clean
VX Vault
Clean
Quttera
Clean
Xpsecsecurity.io blocked? Check the provider verdict report created on July 15, 2026
Domain Information
CreatedDecember 28, 2023 at 5:49 PMUpdated: December 16, 2025 at 12:07 PM · Expires: December 28, 2026 at 5:49 PM
SSL CertificateR13TLS 1.3 · Valid for: 3 months · from May 15, 2026 at 7:15 PM · to August 13, 2026 at 7:15 PM
Name Serversemma.ns.cloudflare.com johnathan.ns.cloudflare.com
Content Analysis
Website titleXPSec Security | Pentest, Red Team e Threat Intelligence
Website descriptionEmpresa brasileira de segurança ofensiva. El1te Team especializado em Pentest, Red Team, Campanhas de Phishing e CTI com BreachFinder. Proteja sua empresa com quem pensa como um atacante.
www.perplexity.aiinstagram.combreachfinder.iowww.google.comxpsec.academygithub.comanalytics.google.comxpsecsecurity.iostats.g.doubleclick.netclaude.aiyoutube.comwww.linkedin.comoutlook.office.comwww.googletagmanager.comchatgpt.com
and 1 more
Security Analysis
Detection SignaturesThese signatures are used to generate the security fingerprint below.
CybersecurityReact PlatformNext.js FrameworkPhishing - High Risk
Verified ServicesThis domain has been verified by the following legitimate services and organizations, confirming authentic ownership and proper email security configuration.
Google Verification
Domain ownership verified by Google.
Microsoft 365
Microsoft cloud productivity suite (Office, email, etc.).
Stripe
Online payment processing platform.
Security FingerprintUnique identifier based on site analysis
Scammers have devised new ways to deceive users, and what was relevant ten years ago may not be applicable today. In this post, we have compiled the most current types of online scams.
If you own Xpsecsecurity.io and want to challenge the trust score, please submit a review request via portal.gridinsoft.com. There you can claim your profile and add verified company/contact details. If you cannot access the portal, email legal(at)gridinsoft.com with proof of legitimacy and contact details. We never charge website owners for reviews or reconsideration requests. For more information, please review our Disclaimer.
Leave a review
1
points /100
The score is based on a 1-100 scale, with 100 being the most reputable.
Check another website
Verify the security of domains and services based on 10M+ real websites.
Is This Your Website?
Think your website was scored unfairly? Request a reevaluation and our team will take another look.
A website report warns you. A PC scan protects you.
Unsafe sites can leave adware, unwanted apps, or hidden malware in downloads and browser settings. Run Gridinsoft Anti-Malware to check what may already be on this Windows PC.
Checks active threats, startup items, and suspicious downloads
Finds adware and unwanted apps linked to unsafe websites
Shows scan results before you decide what to remove
Your comment is currently undergoing moderation and will be published shortly.
Help protect others by sharing this page on social media! The more people who know about xpsecsecurity.io, the fewer chances they have to deceive someone else.Help others evaluate xpsecsecurity.io by sharing this page on social media!
Help protect others by sharing this page on social media! The more people who know about xpsecsecurity.io, the fewer chances they have to deceive someone else. Help others evaluate xpsecsecurity.io by sharing this page on social media!