This company has verified ownership of the profile and can respond to reviews.
Phishing
This site is classified as Phishing based on multiple risk signals, including 2 blacklist detections and no established public user-review history. These risks are driven by active warning signals despite the site's longer domain history.
Trust signal radarNormalized trust signals for xpsecsecurity.ioDomain Maturity: 970 daysDomain MaturityWarning Cleanliness: 2 detectionsWarningCleanlinessSafety Level: 1 negative tagsSafetyLevelPositive Signals: 4 positive signalsPositiveSignalsPopularity: Estimated from social profiles: YouTubePopularityTrust Zone: .ioTrust ZoneOperational Signals: 3 detected servicesOperationalSignalsLocation Credibility: Hosting country BRLocation Credibility
Figure 1. Trust signal radar for xpsecsecurity.io. Larger shaded area indicates stronger trust signals.
multiple malware or phishing blacklist detections (2)
Context signals:
content related to cybersecurity tools for malware and phishing defense
Last checked July 30, 2026 at 6:03 PM by
Gridinsoft Trust Model v2.5.1
Share this report?
What is Xpsecsecurity?
We flagged Xpsecsecurity.io as phishing. The page behavior matches a common credential-theft flow: impersonation first, urgency second, data request last.
Typical prompts on sites like this include account alerts, failed-delivery notices, or "verify now" dialogs asking for passwords, card numbers, or one-time codes. Do not submit credentials here. Open the real service in a new tab and check your account directly.
Figure 2.
Website screenshot for Xpsecsecurity.io.
2026-07-30 21:03:00
🚨
Gridinsoft blocks this website because it was classified as phishing.
xpsecsecurity.io has a blacklist warning and a 10/100 trust score. Verify the site identity before use and avoid sending sensitive or payment data.
Why is xpsecsecurity.io marked "Phishing"?
Gridinsoft evaluates xpsecsecurity.io, focusing on limited website popularity, suspicious content indicators (Blacklisted), hosting technology and infrastructure, SSL certificate status, website reputation across multiple databases, customer reviews from various independent platforms. We weigh these indicators to calculate the trust score.
Note: Automated systems are not perfect — while the evidence suggests risk, there is still a chance the site is legitimate. We recommend you check the website using detailed analysis or by contacting the company directly through verified channels.
A structured view of the site's detected themes, page signals, and related online footprint elements.
Cybersecurity
React Platform
This website is built using React, a popular JavaScript library for creating interactive user interfaces.
Google Tag Manager
This website uses Google Tag Manager to add and update tracking tags on its website.
Next.js Framework
Social Media Links
The presence of social media links on the website indicates that it references social media accounts. This signal alone does not confirm ownership or authenticity of those profiles.
GitHub Profile
This site links to a GitHub profile or public repository associated with the project. This is a useful transparency signal, especially when the account has public activity.
Listed by Gridinsoft
Gridinsoft Internet Security classified this site as unsafe. As a VirusTotal partner, our detections contribute to broader protection across tools and browsers.
Claimed Company Profile
The company behind xpsecsecurity.io has claimed its profile in the Gridinsoft portal and provided verified ownership details.
Verified YouTube Channel
Ownership verification confirms that this site controls the YouTube channel XPSec Security (@xpsecsecurity) (1,760 subscribers, 49 videos, 54,712 total views, since 2019, country: BR).
Verified Business Services
This domain publishes TXT verification records for multiple third-party business platforms. This indicates that the domain has been connected to those services at the DNS level.
Business Infrastructure
The domain xpsecsecurity.io is configured for several service layers, such as email delivery, platform verification, or security tooling. This reflects a broader operational setup than a minimal single-purpose deployment.
External provider warnings: 2/27 Phishing
This section shows what independent external security sources say about this site.
A warning appears when one or more sources report malware, phishing, abuse, or other safety concerns. Each row shows the source and its verdict.
If no source reports a warning, the site is shown as clear in this section.
CRDF
Malicious
Webroot
Malicious
External provider results for Xpsecsecurity.io, last checked July 30, 2026.
— VirusTotal
Domain Information
CreatedDecember 28, 2023 at 5:49 PMUpdated: December 16, 2025 at 12:07 PM · Expires: December 28, 2026 at 5:49 PM
Domain StatusClient Transfer ProhibitedDNSSEC: UNSIGNED
Top Level Domain.ioGeneric TLD
Technical Details
IP Address216.198.79.1
Hosting ProviderAS16509 Amazon.com, Inc.Walnut, California, US
SSL CertificateYR1TLSv1.3 · Valid for: 3 months · from July 17, 2026 at 12:12 AM · to October 15, 2026 at 12:12 AM
Name Serversemma.ns.cloudflare.com johnathan.ns.cloudflare.com
Content Analysis
Website titleXPSec Security | Pentest, Red Team e Threat Intelligence
Website descriptionEmpresa brasileira de segurança ofensiva. El1te Team especializado em Pentest, Red Team, Campanhas de Phishing e CTI com BreachFinder. Proteja sua empresa com quem pensa como um atacante.
www.cve.orgbreachfinder.ioyoutube.comoutlook.office.comxpsecsecurity.ioclaude.aiwww.linkedin.comchatgpt.comgithub.cominstagram.comregion1.analytics.google.comstats.g.doubleclick.netwww.google.nlwww.googletagmanager.comxpsec.academy
and 2 more
Security Analysis
Detection SignaturesThese signatures are used to generate the security fingerprint below.
CybersecurityReact PlatformNext.js Framework
Verified ServicesThis domain has been verified by the following legitimate services and organizations, confirming authentic ownership and proper email security configuration.
Google Verification
Domain ownership verified by Google.
Microsoft 365
Microsoft cloud productivity suite (Office, email, etc.).
Stripe
Online payment processing platform.
Security FingerprintUnique identifier based on site analysis
Scammers have devised new ways to deceive users, and what was relevant ten years ago may not be applicable today. In this post, we have compiled the most current types of online scams.
If you own Xpsecsecurity.io and want to challenge the trust score, please submit a review request via portal.gridinsoft.com. There you can claim your profile and add verified company/contact details. If you cannot access the portal, email legal(at)gridinsoft.com with proof of legitimacy and contact details. We never charge website owners for reviews or reconsideration requests. For more information, please review our Disclaimer.
A website report warns you. A PC scan protects you.
Unsafe sites can leave adware, unwanted apps, or hidden malware in downloads and browser settings. Run Gridinsoft Anti-Malware to check what may already be on this Windows PC.
Checks active threats, startup items, and suspicious downloads
Finds adware and unwanted apps linked to unsafe websites
Shows scan results before you decide what to remove
Your comment is currently undergoing moderation and will be published shortly.
Help protect others by sharing this page on social media! The more people who know about xpsecsecurity.io, the fewer chances they have to deceive someone else.Help others evaluate xpsecsecurity.io by sharing this page on social media!
Help protect others by sharing this page on social media! The more people who know about xpsecsecurity.io, the fewer chances they have to deceive someone else. Help others evaluate xpsecsecurity.io by sharing this page on social media!