Security Scan: Sign in to your account

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/25b5b8d5-9b42-49fa-a44c-0026b9c01824 Domain and IP registration (RDAP)/api/v1/rdap/25b5b8d5-9b42-49fa-a44c-0026b9c01824 Certificate Transparency/api/v1/ct/wildlands.acltci.com How often this domain was scanned/api/v1/domain/stats/psyrusec.com Scan history for this domain/api/v1/domain/history/psyrusec.com?limit=15

This website contacted 10 IPs in 4 countries across 8 domains to perform 38 HTTP transactions. The main domain is wildlands.acltci.com and was registered 31 years ago.

Submitted URL: https://psyrusec.com/wildlan

Effective URL:

https://wildlands.acltci.com/?sso_reload=true

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Cloned Microsoft sign-in page hosted on wildlands.acltci.com (not Microsoft). Self-hosts Microsoft's login $Config and posts credentials to an attacker host — Evilginx-class AiTM credential/MFA phishing. Do not enter credentials.

Risk Factors

Cloned Microsoft login page on an unrelated, unranked domain

Microsoft $Config login schema self-hosted outside Microsoft infrastructure (adversary-in-the-middle / Evilginx pattern)

Credential capture form (email + password) with form action on attacker-controlled host

Redirect parameter pointing at login.microsoftonline.com to lend legitimacy

Heavy dynamic JavaScript code generation (160 Function() calls)

Domain age information unavailable

Details

Page Title

Scan Type

public

Domain Name Analysis

The domain name 'psyrusec.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'psyrusec' stretches across 8 characters containing two vowels alongside six consonants. Tokenizing the label suggests three words: psy, ruse, c. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.85s

Total Load Time

4 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:133 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software85% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

85%

social media network

40%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	50.31.174.181	Chicago, Illinois, United States	AS23352DEFT.COM
3	216.24.57.18	United States	AS397273Render
3	40.126.32.72Office365 · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
3	216.24.57.16	United States	AS397273Render
3	2.21.239.135Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	20.190.160.64Office365 · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
3	13.107.246.44Azure · CLOUD	United States	AS8075Microsoft Corporation
3	40.126.31.131Azure · CLOUD	Dublin, Leinster, Ireland	AS8075Microsoft Corporation
3	150.171.73.13Azure · CLOUD	United States	AS8075Microsoft Corporation
3	52.178.17.232Azure · CLOUD	Amsterdam, North Holland, Netherlands	AS8075Microsoft Corporation
38	10	-	-