Verdict
psychsydney.com.au shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Psych Sydney is a psychology clinic website describing services, therapists, booking process, and fees including Medicare claiming. The site emphasizes in-person and telehealth therapy for adults and young people and provides contact and booking CTAs. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 6 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 26% confidenceAbuseIPDB, 13 reports; shared hosting inflates reports | Clear |
| Domain age | 2.4 years oldRegistered history | Clear |
| Web archive | Archived since 2024Public history exists | Clear |
| Certificate | Encrypted connectionIssued by GoDaddy TLS Intermediate CA DV - R1v1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
Psych Sydney is a psychology clinic website presenting in-person and telehealth therapy for adults and young people, with information about psychologists, treatment areas, booking procedures, fees, rebates, and Medicare claiming; its apparent business model is client-paid professional healthcare services.
Scam/Impersonation Risk
The site’s visible content is consistent with a local psychology practice and does not itself show obvious phishing mechanics, credential-harvesting forms, brand impersonation, or suspicious service claims. However, this benign presentation is materially outweighed by confirmed external threat detections: the domain is blacklisted, and multiple external assessments identify malicious activity associated with it. The available evidence does not establish that the clinic content itself is fraudulent, but the contradiction between the professional healthcare presentation and the confirmed external detections creates a serious risk for account, payment, or sensitive-information interactions.
- The homepage presents “Psych Sydney,” therapy services, psychologist profiles, booking calls to action, and in-person and telehealth care.
- The site was externally assessed with 6 malicious detections and a confirmed blacklist status.
- The contact and booking presentation contains no detected login form, hidden form, password-submission form, or untrusted form destination.
- Historical records span 2024-03-24 through 2025-08-11, representing 2 years tracked; no repurposing or semantic category change was identified.
Regulatory Verification Notes
The site describes a healthcare practice, named psychologists, therapy processes, fees, rebates, and Medicare claiming, but the supplied evidence does not show a professional registration number, licensing reference, or independently verified operator identity. This is a regulatory and disclosure matter requiring confirmation rather than standalone proof of fraud. The registration record identifies “PSYCHOLOGY ONLINE SYDNEY” and lists GoDaddy.com LLC trading as GoDaddy.com as registrar, but the real-world connection between that record and the operating clinic remains unverified. A separate broker-oriented reputation dataset reported no match; that result is contextual only and does not establish licensing or regulatory standing.
- The homepage and fees page describe psychological services, Medicare claiming, and client-paid sessions but do not provide a licensing or registration number in the supplied content.
- The registration record lists owner name “PSYCHOLOGY ONLINE SYDNEY” and registrar “GoDaddy.com LLC trading as GoDaddy.com.”
- Domain age is recorded as 2.41 years.
- Hosted on AS16509 (AMAZON-02 - Amazon.com, Inc., US); TLS certificate issued by GoDaddy TLS Intermediate CA DV - R1v1, validation level DV, valid to 2026-11-19T17:29:12+00:00.
What to Verify Next
Before any sensitive interaction, the clinic’s legal operating entity and each practitioner’s professional registration should be confirmed through the relevant Australian professional register or health-regulatory authority. Contact details should be corroborated through an independently sourced channel, and any payment or Medicare process should be confirmed directly with the clinic and the applicable service provider. Sensitive personal, medical, credential, or payment information should not be submitted until those checks reconcile the website with an independently verified organisation.
- The “Meet our psychologists” page provides the practitioner-facing identity claims to compare with professional-register records.
- The “Fees and rebates” and booking pages identify the payment and Medicare-related processes requiring direct confirmation.
- The site offers online booking but no sensitive form was detected during technical inspection.
Summary Verdict
The overall posture is critical and unsuitable for sensitive interaction without independent validation. The site’s professional presentation and technically functional pages do not overcome the confirmed external malicious detections and blacklist status, while operator identity remains unverified.
Infrastructure Integrity
The website is delivered through CDN/WAF infrastructure operated on Amazon.com, Inc.’s AS16509, with observed edge addresses 13.248.243.5 and 76.223.105.230; an origin server was not observable. This infrastructure provides a mitigating layer against direct exposure, but it is not evidence of site legitimacy, and abuse reports associated with one shared CDN address cannot by themselves be assigned to the clinic.
Closing Assessment
The appropriate enterprise posture is to suspend sensitive interactions pending independent identity, practitioner-registration, and payment-channel confirmation; if access is necessary, limit activity to non-sensitive viewing until those checks are complete.
Written analysis generated 2026-08-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The page exchanged network traffic with destinations TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_TRAFFIC - The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_POSTS - The page made background requests to destinations TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_XHR - Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Signals weighed against the site
- AbuseIPDB: 13 reports on hosting IP 76.223.105.230 (Amazon.com, Inc., Content Delivery Network), 26% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of psychsydney.com.au.
- The request stayed on psychsydney.com.au. It was not redirected to another domain. Clear
- Registration is published under GoDaddy.com LLC trading as GoDaddy.com. Clear
- DNS for this domain is served by domaincontrol.com, across 2 name servers. Noted
- The earliest public archive of this site is from 2024-03-24. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | GoDaddy.com LLC trading as GoDaddy.com |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 76.223.105.230 |
| Name servers | ns53.domaincontrol.com, ns54.domaincontrol.com |
| SSL issuer | GoDaddy TLS Intermediate CA DV - R1v1 |
| SSL expiry | 2026-11-19 |
| Domain age | 2.41 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2024-03-24 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 6 flagged | AbuseIPDB: 26% confidence, 13 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about psychsydney.com.au at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.