Security Report: phppatcher.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/60ef0463-0947-4aa5-8028-1f2436ab9288 Domain and IP registration (RDAP)/api/v1/rdap/60ef0463-0947-4aa5-8028-1f2436ab9288How often this domain was scanned/api/v1/domain/stats/phppatcher.com Scan history for this domain/api/v1/domain/history/phppatcher.com?limit=15

This website contacted 18 IPs in 2 countries across 8 domains to perform 40 HTTP transactions. The main domain is phppatcher.com and was registered 2 weeks ago.

Submitted URL: https://phppatcher.com/

AI Security Verdict

Moderate Risk

Confidence: 62%

Risk Score

Three-day-old self-branded site selling $99 PHP upgrade help. No credential or payment forms, no impersonation, no malware signals. Only a single-source abuse-reputation tag, which is not content evidence. Treat as unproven new business; verify identity before granting hosting access.

Risk Factors (3)

Domain registered 3 days ago, matching the very date of the 'critical PHP flaw' it markets — the timeline is unverifiable and the marketing leans on urgency

Site sells a $99 remote-hosting-access service but displays no company identity, registration details, address, or verifiable credentials for the 'senior engineers'

Requests that customers 'give us access' to their hosting as part of onboarding, which carries inherent account-access risk if the operator is not trustworthy

Safety Factors (4)

Self-branding matches the domain — no impersonation of a different organisation

No password, disguised-password or payment fields; all forms are same-origin lead capture with no cross-origin submission

No JavaScript malware, no credential exfiltration, no IDS or Safe Browsing hits; third-party scripts are top-ranked mainstream services (Google Analytics, Intercom, Facebook)

Page content reads like a genuine technical service description with hosting-platform-specific upgrade procedures, rollback policy and pricing

Domain age information unavailable

Details

Page Title

PHP Patcher - your website's PHP security update, done today for $99

Scan Type

public

Favicon Hash

MMH3: -569451431

MD5: 6aedac59e3e49ff6badf49e264aee743

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'phppatcher.com' is registered and has no subdomain. The second-level label 'phppatcher' is 10 characters long holding 2 vowels versus 8 consonants. Tokenizing the label suggests 3 words: php, patch, er. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.22s

Total Load Time

1.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:12,874 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software64% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

64%

documentation technical

35%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	108.138.7.100Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
2	108.138.7.40Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
2	142.251.14.97Google · CDN	United States	AS15169Google LLC
2	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
2	216.239.34.36Google · CDN	United States	AS15169Google LLC
2	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
2	65.9.130.61Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
2	3.174.46.72Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
2	3.91.131.43Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
2	108.138.7.117Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
40	18	-	-