Security Scan Report: phpgowinvip.com

Redirected to: https://jili20.vip/?host=https://ar3b4r.com?ch=66499

Submitted: Dec 18, 2025, 7:08:28 AMCompleted: Dec 18, 2025, 7:11:12 AMpubliccompleted
Loading additional data...

Summary

This website contacted 8 IPs in 1 country across 2 domains to perform 10 HTTP transactions. The main domain is jili20.vip and was registered NaN years ago.

Submitted URL: https://phpgowinvip.com/nzlhmdg

Effective URL: https://jili20.vip/?host=https://ar3b4r.com?ch=66499Redirected

AI Security Verdict

High Risk

Confidence: 95%

10
Risk Score

Site impersonates Telegram on a newly registered, unranked domain; high‑risk phishing.

Risk Factors
Brand impersonation on an unranked, newly registered domain
Very new domain (<30 days) with no reputation
Suspicious redirect to unrelated domain
Unranked domain used for brand spoofing
Domain age information unavailable

Details

Page Title

PH2 - The Philippines' No.1 gaming platform

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

gambling betting

(66%)

Domain Information

You're looking at domain 'phpgowinvip.com' on the commercial generic top-level domain (.com) without a subdomain. The second-level label 'phpgowinvip' is 11 characters long with 3 vowels and 8 consonants. Breaking it apart gives four words: php, go, win, vip. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://phpgowinvip.com/nzlhmdg

Page Load Overview

8.23s
Total Load Time
10
HTTP Requests
2
Domains
N/A
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:316 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting66% confidence
Type: static
Method: ml+structural

All Detected Categories

gambling betting
66%
social media network
42%
entertainment media
28%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1104.21.94.136United States
AS13335CLOUDFLARENET
1172.67.185.102United States
AS13335CLOUDFLARENET
1104.21.76.24United States
AS13335CLOUDFLARENET
1172.67.168.79United States
AS13335CLOUDFLARENET
12606:4700:3031::6815:4c18United States
AS13335CLOUDFLARENET
12606:4700:3036::6815:5e88United States
AS13335CLOUDFLARENET
12606:4700:3031::ac43:b966United States
AS13335CLOUDFLARENET
12606:4700:3036::ac43:a84fUnited States
AS13335CLOUDFLARENET
108--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T191627432D5DA62BB121382D066377F19F25B446BDF1A8491F1EE42E44FE6E92CC73058

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Lzsvzk31RzBvQZhexqmbTWx49LKzdGpVP5+q8OS:LzT4hexqmbKx49WzdWVh+Rp

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:15115:HCBMYWCnW3CnADEkCqiSIlBhUhBAhEBinQCRXGUA40qQCARkQAwUSiQsVFEkSIMpCmD9FJC3kChAWOICTjXgzhBCSRRARUWo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff01091919090101
Perceptual Hash:88d966cecd88e6c6
Difference Hash:1519193331310d15
Wavelet Hash:ff03091919190101
Color Hash:#1f9393

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data