jilifree100[.]ph

The domain jilifree100.ph was identified as a brand-impersonation threat targeting Ankr, a blockchain infrastructure provider. Analysis indicates the site posed as a gambling platform offering fraudulent incentives under the guise of legitimate services. As of the latest assessment, the domain has been taken offline, though prior activity suggests malicious intent. Infrastructure analysis reveals the domain was flagged by 2 of 95 security vendors on VirusTotal, indicating low but detectable detection rates. It resolved to the IP address 63.250.43.9 and employed a Sectigo Limited SSL certificate, a common issuer used by both legitimate and malicious sites. The page title, 'Jili777 Free 150 | Jili777.com.ph - Jili Free 100-Jili178,' suggests an attempt to lure users with fake monetary offers. Additional technical indicators include a Gridinsoft trust score of 0/100, presence on one security blocklist, and detection by PhishDestroy. Technologies detected on the site included WordPress, MySQL, PHP, Nginx, HSTS, and Google Analytics, which are frequently exploited in phishing campaigns to create deceptive legitimacy. The domain is currently offline, reducing immediate risk to users. However, organizations and individuals should remain vigilant for similar impersonation attempts targeting blockchain or financial services. Recommendations include monitoring for newly registered domains with similar naming patterns, blocking the resolved IP (63.250.43.9) at the network level, and verifying SSL certificates against known malicious infrastructure. Users should avoid interacting with unsolicited gambling or financial offers, particularly those mimicking established brands.