100jili8[.]com

Analysis of 100jili8.com shows an active high‑risk brand‑impersonation campaign targeting Chase. The site resolves to 172.67.147.66, a Cloudflare edge server (AS13335) located in the United States, and uses Cloudflare nameservers amos.ns.cloudflare.com and harlee.ns.cloudflare.com. The web stack is identified as WordPress running on PHP with MySQL, and HTTPS is enforced via HSTS with a Google Trust Services certificate (WE1). The HTTP response code is 200 and the page title advertises an online casino (“100jili Online Casino is best gambling in the Philippines – 100jili App”), indicating the campaign is masquerading as a crypto gambling portal while impersonating the Chase brand. The domain was registered on May 8 2024 through Gname.com Pte. Ltd., appears on one security blocklist, and has a Gridinsoft trust score of 0/100. AlienVault OTX cites the domain in 24 threat‑intel pulses, and VirusTotal flags it by 4 of 95 scanners. PhishDestroy has already blocked the domain and the underlying kit is classified as a Gambler Scam. Defenders should add 100jili8.com to URL filtering and sinkhole lists, monitor for related C2 infrastructure, and enforce strict outbound rules for connections to Cloudflare IP ranges associated with the domain. Further investigation is needed to determine whether the site hosts credential‑stealing forms or crypto‑wallet addresses, as the page content has not been publicly disclosed.