ScanMalware.com

Security Scan Report: 789jlxyz.com

Redirected to: https://jili20.xyz/?host=https://ar3b4r.com?ch=66499

Site favicon
Submitted: Jan 4, 2026, 5:11:57 PMCompleted: Jan 4, 2026, 5:13:11 PMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 1 country across 2 domains to perform 26 HTTP transactions. The main domain is jili20.xyz and was registered NaN years ago.

Submitted URL: https://789jlxyz.com/zmvinm

Effective URL: https://jili20.xyz/?host=https://ar3b4r.com?ch=66499Redirected

AI Security Verdict

High Risk

Confidence: 95%

10
Risk Score

High‑risk phishing site impersonating Telegram on a newly registered, unranked domain.

Risk Factors
Brand impersonation of Telegram on an unrelated domain
Newly registered domain (<90 days)
Unranked domain with low reputation
Final destination domain does not match the displayed brand
Domain age information unavailable

Details

Page Title

PH2 - The Philippines' No.1 gaming platform

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

gambling betting

(52%)

Domain Information

You're looking at domain '789jlxyz.com' on the commercial generic top-level domain (.com) with no subdomain. The registrable portion '789jlxyz' spans 8 characters containing zero vowels alongside five consonants; it also includes 3 digits. Splitting it apart reveals 4 words: 789, j, l, xyz. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://789jlxyz.com/zmvinm

Page Load Overview

3.43s
Total Load Time
27
HTTP Requests
2
Domains
970 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:1,002 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting52% confidence
Type: static
Method: ml+structural

All Detected Categories

gambling betting
52%
entertainment media
25%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9188.114.97.3United States
AS13335CLOUDFLARENET
9188.114.96.3United States
AS13335CLOUDFLARENET
9104.21.62.146United States
AS13335CLOUDFLARENET
273--

Detected Technologies4

Open-Graph-Protocolvwebsite
100%
HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T182625332D5DA66FB021386D066377B29F257446BDF2A8491F0EE42E44FE6E92CC73058

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:nzskvkapEhexqmbTWx49LKzdGpVP5+qf/OS:nzMhexqmbKx49WzdWVh+g/p

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:15780:LIzTKAoCBEQsYABWBOMD2wCsAJCGENCAXkRhEIBDMN6SyIJC5xRgBA2HgSSAQFYAQUx0SAhCUEAIq1MVBBqIWMAQrADCQfUD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00cb4d4d190d0119
Perceptual Hash:9b734c664c76195c
Difference Hash:555b5b19311b15b3
Wavelet Hash:00c3cbcb1b1b031b
Color Hash:#3a5e78

Other Hashes

Crop Resistant:b3b3b3b0b5b4b4b3,796961c0c6e6e409,155a5b1b331b15b2

Scan History

Scan history not available

Unable to load historical scan data