# phglass-studio.com: RATUTOGEL slot game product page | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/phglass-studio.com/ Machine-readable companion: https://phishdestroy.io/domain/phglass-studio.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-11-02 01:40:32 UTC - Last availability or vendor check: 2026-11-02 01:40:32 UTC - Stored record updated: 2026-11-02 05:30:24 UTC - VirusTotal detections in the stored snapshot: 17/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 169.58.3.235 - Registrar in stored WHOIS data: GoDaddy.com, LLC - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2022-08-17 15:15:07 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a199e8-7204-760f-a92a-d5294b65be51/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/phglass-studio.com - Certificate Transparency search: https://crt.sh/?q=%25.phglass-studio.com - Web Archive lookup: https://web.archive.org/web/*/https://phglass-studio.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records the RATUTOGEL product page captured on phglass-studio.com, showing a slot game listing with registration and login buttons. The captured page on phglass-studio.com presents a RATUTOGEL product listing, headed "Sang Ratu Mesin-Nya Bocor Terus Bahkan Pengganda Tak Terbatas" and priced at RP 22.000. A large promotional image labeled "Pengganda Tanpa Batasan" dominates the layout, with two smaller thumbnails beside it. The main interaction centers on two buttons, DAFTAR DISINI and LOGIN DISINI, which invite visitors to register or sign in, while a paragraph of Indonesian text claims the game's machine frequently leaks so multipliers fall without limit. The stored VirusTotal domain result reports 17 detections out of 92 engines. DNS8 reported "suspicious"; ESET reported "suspicious". Package revision: 572818c09718ecd958bd328d9345d24daba450b73aa2396ef92fe95fed279bec Text generated (not scan time): 2026-11-02 03:11:42 Reviewed evidence snapshot: {"domain":"phglass-studio.com","screenshot_available":true,"page_title":"RATUTOGEL : Sang Ratu Mesin-Nya Bocor Terus Bahkan Pengganda Tak Terbatas","original_meta_description":"RATUTOGEL akhir akhir ini menjadi perbincangan hangat dikarenakan mesin game online digital sering bocor sehingga pengganda turun tanpa henti ini tak ada batasannya jadi ambil kesempatan ini dan gunakan dengan baik cuma tersedia di sini saja.","metadata_observed_on":"2026-11-02","virustotal":{"detections":17,"engines":92,"malicious":14,"suspicious":3,"retrieved_date":"2026-11-02","analysis_date":"2026-10-30","flagging_vendors":["DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","CyRadar","Webroot","Fortinet","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","Chong Lua Dao","alphaMountain.ai","Forcepoint ThreatSeeker"],"vendor_labels":{"DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-11-02T02:11:00Z","final_host":"phglass-studio.com","captured_on":"2026-11-02"},"plain_text_contract":1,"page_paragraph_target_words":94,"virustotal_public_summary":"The stored VirusTotal domain result reports 17 detections out of 92 engines. DNS8 reported \"suspicious\"; ESET reported \"suspicious\".","page_paragraph_target_characters":516} Source facts (timestamps as stored): {"record_id":1737510,"first_recorded_at":"2026-11-02 02:40:32","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":17,"denominator":92,"malicious":14,"suspicious":3,"vendors":{"DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-30T15:43:20Z","checked_at":"2026-11-02 03:10:53","fetched_at":"2026-11-02T02:10:53Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":17,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","Chong Lua Dao","CyRadar","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","Lionic","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":"2026-10-30 15:43:20","checked_at":"2026-11-02 03:10:53","fetched_at":"2026-11-02 02:10:54","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-02 03:10:55"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-02 04:30:19"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-11-02 02:40:32"}} ## Stored page captures - URLScan · 2026-11-02: https://screenshots.phishdestroy.io/us/01a199e8-7204-760f-a92a-d5294b65be51.png Captured: 2026-11-02 01:38:36 UTC Source report: https://urlscan.io/result/01a199e8-7204-760f-a92a-d5294b65be51/ SHA-256: f67f78110808341f57e670de6e2e2a11555bd688b0002f771a46c886770bfa10 - URLScan · 2026-05-08: https://screenshots.phishdestroy.io/us/019e081a-ab95-771d-8389-5185310f223c.png Captured: 2026-05-08 15:00:46 UTC Source report: https://urlscan.io/result/019e081a-ab95-771d-8389-5185310f223c/ SHA-256: 4a4697f6bf8e04eb88f48727552946ca2b9bcdefa0f2c9f52a4823fcfc85fe32 - URLScan · 2026-05-09: https://screenshots.phishdestroy.io/us/019e0bc4-120e-72aa-bcc2-58d24a9a8502.png Captured: 2026-05-09 08:04:29 UTC Source report: https://urlscan.io/result/019e0bc4-120e-72aa-bcc2-58d24a9a8502/ SHA-256: 4a4697f6bf8e04eb88f48727552946ca2b9bcdefa0f2c9f52a4823fcfc85fe32 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/b4e99869-76ee-4d41-a275-4b9ea35692e1.png Captured: 2026-11-02 02:11:00 UTC Source report: https://radar.cloudflare.com/scan/b4e99869-76ee-4d41-a275-4b9ea35692e1 SHA-256: 28cfa08cf8b01f6b2a7a11917e2dcb1cbf87b617ab0269587be327ca5d40a2dc ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-02T01:41:06Z", "uuid": "01a199e8-7204-760f-a92a-d5294b65be51", "scanned_at": "2026-11-02T01:38:36Z", "final_url": "https://phglass-studio.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://phglass-studio.com/", "from": "http://phglass-studio.com/", "status": 307 } ], "ip": "169.58.3.235", "ptr": "vmi3613562.contaboserver.net", "domains": [ "assets.teepublic.com", "www.google.com", "i.imgur.com", "static.cloudflareinsights.com", "www.google-analytics.com", "www.gstatic.com", "www.googletagmanager.com", "www.datadoghq-browser-agent.com" ], "ips": [ "2a00:1450:4001:c1f::61", "142.251.155.119", "2600:9000:2359:9600:9:9214:f0d6:9021", "2606:4700::6810:4f49", "2001:4860:4802:36::178", "2a06:98c1:3103::6812:26a1", "199.232.192.193", "169.58.3.235" ], "asns": [ "15169", "16509", "13335", "54113", "51167" ], "countries": [ "DE", "US", "FR" ], "link_domains": [ "assets.teepublic.com", "www.facebook.com", "www.instagram.com", "www.pinterest.com", "www.reddit.com", "www.tiktok.com", "twitter.com", "www.bbb.org", "teepublic.zendesk.com", "www.teepublic.com" ], "social": [ "https://www.facebook.com/TeePubliccom-865099700332026", "https://www.instagram.com/teepublic", "https://www.tiktok.com/@teepublic", "https://twitter.com/TeePublic" ], "doc_hash": "9d7ee562567c1f584e38bca9a44498dee5cb60d4aa615181c9c1ea6ee48257fb", "globals": [ "DD_RUM", "dataLayer", "ga", "TeePublic", "xhr", "checkProductImageSwapQueue", "Cart", "$", "jQuery", "jQuery112405944166794611412", "Cookies", "setImmediate", "clearImmediate", "__cfBeacon", "google_tag_data", "gaplugins", "gaGlobal", "gaData", "google_tag_manager" ], "cookies": [ "__cf_bm", "_ga", "_gid", "NID", "_dd_s" ], "tls": { "san": [ "phglass-studio.com", "www.phglass-studio.com" ], "cipher": "AES_256_GCM", "issuer": "YR1", "subject": "phglass-studio.com", "protocol": "TLS 1.3", "valid_to": "2027-01-26T05:08:50Z", "valid_from": "2026-10-28T05:08:51Z" }, "domain_age_days": 1523, "apex_age_days": 1523, "tls_age_days": 4, "tls_valid_days": 89, "requests": 51, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 94, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "genericgambling" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Generic Gambling" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "Apache", "content-type": "text/html" } }, "cf": { "v": 1, "fetched_at": "2026-11-02T02:11:20Z", "uuid": "b4e99869-76ee-4d41-a275-4b9ea35692e1", "scanned_at": "2026-11-02T02:11:00Z", "final_url": "https://phglass-studio.com/", "status": 200, "history": [ { "url": "https://phglass-studio.com/", "status": 200 } ], "dom_hash": "3ba8128363f1495bb4024f8369de333af5e8d9c769ae974bf078d0669d6bd7cf", "doc_hash": "9d7ee562567c1f584e38bca9a44498dee5cb60d4aa615181c9c1ea6ee48257fb", "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "phglass-studio.com", "type": "A", "value": "169.58.3.235" } ], "dnssec_valid": false, "ip": "127.0.1.12", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "GoDaddy.com, LLC", "created": "2022-08-17T17:15:07Z", "updated": "2026-08-18T17:48:18Z", "expires": "2027-08-17T17:15:07Z", "nameservers": [ "ns1.greengeeks.net", "ns2.greengeeks.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-02T02:10:53Z", "analysis_at": "2026-10-30T15:43:20Z", "stats": { "timeout": 0, "harmless": 45, "malicious": 14, "suspicious": 3, "undetected": 30 }, "detections": { "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "registrar": "GoDaddy.com, LLC", "created": "2022-08-17T17:15:07Z", "expires": "2027-08-17T17:15:07Z", "updated": "2026-08-18T17:48:18Z", "first_seen": "2024-09-23T11:25:52Z", "dns": [ { "ttl": 21600, "type": "SOA", "rname": "root.chi210.greengeeks.net", "value": "ns1.greengeeks.net" }, { "ttl": 13523, "type": "A", "value": "169.58.3.235" }, { "ttl": 21600, "type": "NS", "value": "ns2.greengeeks.net" }, { "ttl": 14400, "type": "MX", "value": "phglass-studio.com", "priority": 0 }, { "ttl": 14400, "type": "TXT", "value": "v=spf1 +a +mx +ip4:108.178.43.106 include:spf.greengeeks.net ~all" }, { "ttl": 21600, "type": "NS", "value": "ns1.greengeeks.net" } ], "dns_at": "2026-10-30T15:44:36Z", "jarm": "3fd3fd16d3fd3fd21c42d42d000000a8d52b2e606af78e33e5cbcbcdeb78a6", "cert": { "san": [ "phglass-studio.com", "www.phglass-studio.com" ], "issuer": "Let's Encrypt / YR1", "serial": "6b80bea5ee68d032ec7046167736b187168", "sha256": "4ae4bf19b118f94de0e8c76d0d1de7688c90312ee2cfc9d8fe90cc036781af17", "subject": "phglass-studio.com", "valid_to": "2027-01-26T05:08:50Z", "valid_from": "2026-10-28T05:08:51Z" }, "whois": { "registrar": "GoDaddy.com, LLC", "registrar_iana_id": "146", "registrar_url": "http://www.godaddy.com", "created": "2022-08-17T17:15:07Z", "updated": "2026-08-18T17:48:18Z", "expires": "2027-08-17T17:15:07Z", "status": [ "clientDeleteProhibited", "clientRenewProhibited", "clientTransferProhibited", "clientUpdateProhibited" ], "nameservers": [ "ns1.greengeeks.net", "ns2.greengeeks.net" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client delete prohibited", "client renew prohibited", "client transfer prohibited", "client update prohibited" ], "events": { "expiration": "2027-08-17T17:15:07Z", "last changed": "2026-08-18T17:48:18Z", "registration": "2022-08-17T17:15:07Z", "last update of RDAP database": "2026-10-27T23:51:28Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-11-02T01:55:17Z", "mail_config": { "mx": [ "phglass-studio.com" ], "spf": "v=spf1 +a +mx +ip4:108.178.43.106 include:spf.greengeeks.net ~all", "dkim": [ "default" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 4 }, "caa_records": { "domain": "phglass-studio.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-11-02T01:41:29Z", "first": "2022-09-30T15:13:58Z", "changes": 40, "days_archived": 42, "scans_per_day": 0.03, "avg_page_bytes": 24790 }, "robots_txt": { "present": true }, "sitemap": { "present": true, "url_count": 14 }, "social_tags": { "ogUrl": "https://phglass-studio.com/", "title": "RATUTOGEL : Sang Ratu Mesin-Nya Bocor Terus Bahkan Pengganda Tak Terbatas", "ogType": "website", "robots": "index, follow", "ogImage": "https://i.imgur.com/3zsdypT.jpeg", "ogTitle": "RATUTOGEL : Sang Ratu Mesin-Nya Bocor Terus Bahkan Pengganda Tak Terbatas", "keywords": "ratutogel", "ogSiteName": "TeePublic", "canonicalUrl": "https://phglass-studio.com/", "ogDescription": "RATUTOGEL akhir akhir ini menjadi perbincangan hangat dikarenakan mesin game online digital sering bocor sehingga pengganda turun tanpa henti ini tak ada batasannya jadi ambil kesempatan ini dan gunakan dengan baik cuma tersedia di sini saja." }, "trackers": { "requests": 46, "trackers": [ { "name": "Google", "company": "Google", "country": "US", "category": "Advertising", "requests": 6 }, { "name": "Google Tag", "company": "Google", "country": "US", "category": "Advertising", "requests": 2 }, { "name": "Google Shopping Reviews", "company": "Google", "country": "US", "category": "Customer Interaction", "requests": 5 }, { "name": "Google APIs", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Imgur", "company": "Imgur", "country": "US", "category": "Misc", "requests": 3 }, { "name": "Cloudflare Insights", "company": "Cloudflare", "country": "US", "category": "Site Analytics", "requests": 4 }, { "name": "Google Analytics", "company": "Google", "country": "US", "category": "Site Analytics", "requests": 2 }, { "name": "Datadog", "company": "Datadog", "country": "US", "category": "Utilities", "requests": 3 } ] }, "mixed_content": { "no_sri": [ "https://www.google-analytics.com/analytics.js", "https://assets.teepublic.com/assets/product_page-2af4d77ccb74974f4afec6972768b6abd2dca23b01d5b2e7380c8a38dff3c308.js", "https://assets.teepublic.com/packs/js/product_page-c8d7a3eb618da10ad666.js" ], "third_party_scripts": 7 }, "status": { "up": true, "code": 200, "timings": { "dns": 62, "tls": 25, "wait": 19, "connect": 17, "download": 95 }, "response_ms": 218 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 22, 80, 443 ] }, "carbon": { "bytes": 305074, "co2_grams": 0.0112, "cleaner_than": 1 }, "dns_server": { "ns": [ { "ip": "75.2.69.7", "host": "ns1.greengeeks.net" }, { "ip": "99.83.188.187", "host": "ns2.greengeeks.net" } ], "zone": "phglass-studio.com" }, "cookies": { "cookies": [ { "name": "__cf_bm", "secure": true, "http_only": true, "same_site": "None" }, { "name": "_ga" }, { "name": "_gid" }, { "name": "NID", "secure": true, "http_only": true, "same_site": "None" }, { "name": "_dd_s", "same_site": "Strict" } ] }, "location": { "ip": "169.58.3.235", "asn": "51167", "org": "Contabo GmbH", "city": "Lauterbourg", "country": "FR" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "phglass-studio.com" }, "dns": { "A": [ "169.58.3.235" ], "MX": [ "{\"exchange\": \"phglass-studio.com\", \"priority\": 0}" ], "NS": [ "ns2.greengeeks.net", "ns1.greengeeks.net" ], "SOA": "{\"nsname\": \"ns1.greengeeks.net\", \"hostmaster\": \"root.chi210.greengeeks.net\", \"serial\": 2026102808, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}", "TXT": [ "v=spf1 +a +mx +ip4:108.178.43.106 include:spf.greengeeks.net ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "169.58.3.235", "family": 4 }, "redirects": { "chain": [ "https://phglass-studio.com" ] }, "linked_pages": { "external": [ "https://assets.teepublic.com/assets/pdfs/designing-for-dtg-061ba741bd403ab1a5d84d0ed3ce584bae150e47068f0a275f72e64e8b577189.pdf", "https://www.facebook.com/TeePubliccom-865099700332026", "https://www.instagram.com/teepublic/", "https://www.pinterest.com/teepub/", "https://www.reddit.com/r/teepublic/", "https://www.tiktok.com/@teepublic", "https://twitter.com/TeePublic", "https://www.bbb.org/us/ny/new-york/profile/online-retailer/teepublic-0121-168669", "https://teepublic.zendesk.com/hc/en-us/articles/29890745668631-General-Product-Safety-Regulation-GSPR", "https://www.teepublic.com/", "https://teepublic.zendesk.com/hc/" ], "external_count": 11, "internal_count": 54 }, "whois": { "registrar": "GoDaddy.com, LLC", "created": "2022-08-17T17:15:07Z", "updated": "2026-08-18T17:48:18Z", "expires": "2027-08-17T17:15:07Z", "status": [ "clientDeleteProhibited https://icann.org/epp", "clientRenewProhibited https://icann.org/epp", "clientTransferProhibited https://icann.org/epp", "clientUpdateProhibited https://icann.org/epp" ], "nameservers": [ "ns1.greengeeks.net", "ns2.greengeeks.net" ] }, "headers": { "headers": { "server": "Apache", "content-type": "text/html" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/cf/b4e99869-76ee-4d41-a275-4b9ea35692e1.png","source":"Cloudflare Radar","report_url":"https://radar.cloudflare.com/scan/b4e99869-76ee-4d41-a275-4b9ea35692e1","captured_at":"2026-11-02T02:11:00Z","sha256":"28cfa08cf8b01f6b2a7a11917e2dcb1cbf87b617ab0269587be327ca5d40a2dc","model_image_sha256":"4e24e9ee315742806bf13226a1c58e4dd7fb4ec4d106c11b8672efbfaa91bfd3","available":true}