About the Phylex scanner
If you have seen Phylex-Scanner or Phylex-Scope-Guard in your server logs, this page explains what it is.
Who we are
Phylex Scan is an automated security scanning service from Phylex (Phoenix Stratos Secura). Our customers use it to test websites and APIs that they own.
Verified assets only
Every asset must be proven to belong to the customer, via a DNS TXT record or a verification file (or a testing authorization approved by our team), before it can be scanned. That proof is re-checked before every scan, and scanning stops if it disappears.
How we identify ourselves
Requests from our scanning engine use the user agent Phylex-Scanner/1.0, and ownership checks use Phylex-Scope-Guard/1.0. Both link to this page.
What we test
The Baseline profile is passive, uses safe templates, and is rate-limited to about 10 requests per second. Destructive tests, denial of service, and brute force are never run. Port scans only run with the asset owner's consent for that scan.
Report activity you don't recognize
If you believe your domain was scanned without permission, email support@foiniks.com with the domain name, the time, and the source IP address from your logs. We will investigate and stop any unauthorized scanning.
Phylex-Scanner/1.0 (+https://phylex.foiniks.com/scanner)Phylex-Scope-Guard/1.0 (+https://phylex.foiniks.com/scanner)