ScanMalware.com

Security Scan Report: jili1love.com

Redirected to: https://jili20.xyz/?host=https://ar3b4r.com?ch=66499

Site favicon
Submitted: Dec 31, 2025, 11:14:28 PMCompleted: Dec 31, 2025, 11:15:42 PMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 1 country across 2 domains to perform 26 HTTP transactions. The main domain is jili20.xyz and was registered NaN years ago.

Submitted URL: https://jili1love.com/ywzmy

Effective URL: https://jili20.xyz/?host=https://ar3b4r.com?ch=66499Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

High‑risk phishing site impersonating Telegram; avoid all interaction.

Risk Factors
Brand impersonation / typosquatting of Telegram
Newly registered domain (<90 days) used for brand impersonation
Unranked domain in Cisco Umbrella top 1M
Multiple redirects to unrelated domains
Domain age information unavailable

Details

Page Title

PH2 - The Philippines' No.1 gaming platform

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

gambling betting

(55%)

Domain Information

Domain 'jili1love.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'jili1love' is 9 characters long holding four vowels versus 4 consonants, along with 1 digit. Word splitting yields 4 words: jil, i, 1, love. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://jili1love.com/ywzmy

Page Load Overview

1.30s
Total Load Time
27
HTTP Requests
2
Domains
329 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:1,012 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting55% confidence
Type: static
Method: ml+structural

All Detected Categories

gambling betting
55%
entertainment media
29%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9188.114.96.3United States
AS13335CLOUDFLARENET
9188.114.97.3United States
AS13335CLOUDFLARENET
9172.67.176.203United States
AS13335
273--

Detected Technologies4

Open-Graph-Protocolvwebsite
100%
HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T128627432D5DA62BB121382D066377F19F25B446BDF1A8491F1EE42E44FE6E92CC73058

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:nzs1vk3yjeBLQZhexqmbTWx49LKzdGpVP5+q8OS:nzjEhexqmbKx49WzdWVh+Rp

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:15130:ALJBTk6+DAIniQD0gk6F2BS4GrICCDRiCgJNs4CIGDRYCgEiUgI0IAjUQEGBAywYwYLVJwAAxABkibraSRECBhAJ6IDRCpAj

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00cfcdc5fdede7c7
Perceptual Hash:bb31644c4e6e19d9
Difference Hash:555b5b0d3b1b0d0d
Wavelet Hash:00c3cbcb1b0b0b03
Color Hash:#ced279

Other Hashes

Crop Resistant:b3b3b3b0b5b4b4b3,e16180c6e6e62d1b,555a5b093b1b0d0d

Scan History

Scan history not available

Unable to load historical scan data