DANGEROUS

Critical risk detected

Phishing site ph67c.info flagged by Gridinsoft and Scam Detector for fake investment dashboards and advance-fee fraud.

Security Review

Is ph67c.info legit or a scam?

Phishing site ph67c.info flagged by Gridinsoft and Scam Detector for fake investment dashboards and advance-fee fraud.

Do this now:Close the page immediately and do not enter any information or download files. If you already interacted with the site, scan your device and monitor accounts for unusual activity.

This is a phishing page tied to fake investment dashboards. Gridinsoft flagged it for phishing, Scam Detector gave it a 10.3/100 trust score, and two independent scam reports link the domain to advance-fee fraud.

Cross-checked against 9 completed checks 2 raised a concern
ph67c.infoScanned 1h ago
4/100
Trust score
0 = danger · 100 = safe
DANGEROUS
Score breakdown
Heuristics 44·MT 4
Screenshot of ph67c.infoSee the live page ↓
Category tags
phishinginvestment scamHow sure we are: High
Technical red flags (1)
1 of 92 engines flagged
Warning signals (1)
Domain is 3 months old
Positive signals (3)
Not on major blacklistsEncrypted connectionClean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

Analysis Summary

Threat Intelligence
1/92
Engines flagged this URL
Domain Age
3 months old
Registered Mar 26, 2026

Website Preview

Visual analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

85
/ 100
Critical visual risk

Visual red flags detected in the screenshot

The site uses a deceptive 'update' modal to trick users into clicking, a common tactic for driving traffic to gambling or malicious software download pages.

Visual risk85/100

What our vision model saw

4 signals

Intrusive modal overlay mimicking a software update prompt to encourage user interaction

High-pressure 'New version found' tactic used to prompt potentially unsafe downloads or redirects

Gambling-themed branding ('Crown88P') associated with high-risk online betting platforms

Generic promotional language promising 'more bonuses and benefits' to lure users

Intelligence

Editorial security brief
Intelligence
High risktrust4/100
90%
Confidence
The domain is only 119 days old and carries no business registration. Gridinsoft detected phishing while Scam Detector assigned a 10.3 trust score for phishing and spamming activity. The page loads a deceptive modal mimicking a software update that pushes users toward gambling or malicious downloads. External domains from kwai.net and adjust.com are typical of traffic-redirection schemes. No legitimate contact details or verifiable ownership appear anywhere on the site.
Risk Factors
5
  • Gridinsoft flagged the page as phishing.
  • Scam Detector trust score is only 10.3/100.
  • Domain registered just 119 days ago with no business records.
  • Deceptive modal overlay pushes users toward gambling or downloads.
  • No contact information or verifiable ownership on the page.
Investigation notes

Page Content

The captured page shows an intrusive modal overlay that mimics a software-update prompt and promotes gambling-branded content under the name Crown88P. No contact email, phone, or address is present. The page is configured as a progressive web app and contains references to financial management and withdrawal systems.

Infrastructure

The site runs on IP 172.67.192.40 behind Cloudflare with a valid Let's Encrypt certificate. One of 92 antivirus engines (Gridinsoft) flagged the URL as phishing. The IP itself shows a clean abuse score of 0/100. External scripts load from s1.kwai.net, cdn.adjust.com, and api.imotech.video, indicating traffic-redirection infrastructure.

Domain History

The domain ph67c.info was registered 119 days ago through Name.com, Inc. No business registration records exist for the domain in any jurisdiction checked. Privacy protection is disabled, yet the registrant details remain hidden.

Web Reputation

Gridinsoft explicitly labels the domain as part of a financial-scam group used for fake investment dashboards and advance-fee requests. Scam Detector assigns a 10.3/100 trust score and flags high-risk phishing and spamming activity. No positive reviews or legitimate business mentions were located.

What this means for you

Do not enter any personal or financial information. Avoid clicking the update prompt or downloading any files. The combination of a new domain, phishing detection, and documented scam reports indicates a high likelihood of fraud.

Recommendation
Close the page immediately and do not enter any information or download files. If you already interacted with the site, scan your device and monitor accounts for unusual activity.
Editorial assessment
SpecificEvidence-led

Web Research Findings

Independent findings for ph67c.info, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.

Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
2 scam reports
Key findings
5 headline facts from open-web research
  • Classified as a financial scam by security researchers, specifically associated with fake investment dashboards and advance-fee fraud.
  • The domain has a very low trust score (10.3/100) on Scam Detector due to high-risk indicators including phishing and spamming.
  • Security vendors (Gridinsoft) block the site and advise against entering personal or financial information.
  • The site is configured as an installable web application (PWA) and features content related to financial management and withdrawal systems.
  • The domain is relatively new and lacks any established public reputation or verifiable business ownership.
Scam reports (2)
Direct quotes from public scam databases, forums, and news.
  • Gridinsoftopen

    "Ph67c.info falls under financial scam activity. Domains in this group are commonly used for fake investment dashboards, advance-fee requests, and fraudulent credit offers."

  • Scam Detectoropen

    "The Scam Detector website Validator gives ph67c.info one of the lowest trust scores on the platform: 10.3. The algorithm detected high-risk activity related to phishing, spamming."

Research summary
Editorial synthesis of the sourced facts above

Gridinsoft reports ph67c.info as part of a financial-scam group used for fake investment dashboards and advance-fee requests. Scam Detector assigns the domain a 10.3/100 trust score and flags phishing and spamming activity. No positive reviews or legitimate business mentions were found.

Domain Timeline

  1. Mar 26, 2026
    Domain registered

    First appeared in WHOIS records — 4 months old today.

  2. Jul 23, 2026
    Latest security review — Flagged as dangerous

    This scan re-ran every check; the current findings are detailed above.

ph67c.info was registered very recently and is already flagged. Freshly-registered domains are disproportionately used for scams, and a young domain with active threat signals warrants extra caution.

Threat Detection

Antivirus Engines

Detection matrix · live
1 engine flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

1Malicious0Suspicious58Harmless92Engines
1
of 92
Gridinsoft
Malicious· phishing

1 antivirus engine flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

Technical Details

The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.

Domain & Encryption

Domain History
Age3 months old
RegistrarName.com, Inc.
RegisteredMar 26, 2026
ExpiresMar 26, 2027
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerLet's Encrypt · YE1
ExpiresOct 20, 2026 (89d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
Web servercloudflare

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

What to do

Avoid this site

Our automated review flagged enough risk that you should treat this site as unverified.

  • Do not interact with ph67c.info

    Do not enter credentials, deposit money, download files, or install browser extensions from this site.

  • Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  • Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  • Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Safer Alternatives

Trying to handle crypto? Use a safe option instead

Dealing with crypto? Use a regulated, well-established exchange rather than an unknown site — and never connect your wallet or enter a seed phrase on a page you can't verify.

Suggestions for safety only — not endorsements. Always verify the address bar before signing in or paying, even on well-known sites.

Final Verdict

4
Trust / 100
Final Verdict·ph67c.info
DANGEROUS

This is a phishing page tied to fake investment dashboards. Gridinsoft flagged it for phishing, Scam Detector gave it a 10.3/100 trust score, and two independent scam reports link the domain to advance-fee fraud.

Close the page immediately and do not enter any information or download files. If you already interacted with the site, scan your device and monitor accounts for unusual activity.

AV engines
92
Domain age
3 mo
Flagged
1
Scan another URL
Security review completemalwaretips.com/url-scan

Safety FAQ

Common questions, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • ph67c.info is a dangerous scam site — avoid interacting with it. Our review tagged it for phishing and investment scam. 1 of 92 security engines flag it (1 as outright malicious). The domain is only 3 months old through Name.com, Inc. — a fresh registration is a classic scam fingerprint. This pattern matches throwaway sites built to take money or data and disappear.
  • No — ph67c.info scored just 4/100 on our trust scale, and we detected active threat indicators. We recommend avoiding it entirely: don't log in, pay, download anything, or connect a wallet.
  • If you've already paid or handed over details on ph67c.info, act quickly. 1) Contact your bank or card issuer immediately and ask to dispute the charge or open a chargeback — the sooner you act, the better your odds. 2) Report the site to the U.S. FTC at reportfraud.ftc.gov or the FBI's IC3 at ic3.gov, and in the UK to Action Fraud at actionfraud.police.uk. 3) If you entered a password, change it on ph67c.info and anywhere you reused it, and turn on two-factor authentication. 4) Watch your bank and email for follow-up fraud, and keep screenshots as evidence.
  • Often yes, if you act fast. Payments made by credit or debit card can frequently be reversed through a chargeback or dispute — contact your bank right away and explain it was a fraudulent site. Bank transfers and gift-card or voucher payments are much harder to recover, but you should still report them to your bank and to the FTC (reportfraud.ftc.gov) or Action Fraud (actionfraud.police.uk). Avoid any "refund" or "recovery" service that contacts you first — it's usually a follow-up scam.
  • Just viewing a scam page is usually low-risk on an up-to-date browser — the real danger is what it asks you to DO (enter details, download a file, send money). If you downloaded anything, run a full antivirus scan and treat the file as untrusted. If you entered a password or card number, change the password everywhere you reused it and contact your bank.
  • You can report ph67c.info through several official channels: the U.S. FTC at reportfraud.ftc.gov, the FBI's Internet Crime Complaint Center (IC3) at ic3.gov, and — in the UK — Action Fraud at actionfraud.police.uk. You can also flag it to Google Safe Browsing (safebrowsing.google.com/safebrowsing/report_phish) so other browsers warn about it, and report it to the company being impersonated if there is one. Reporting helps get scam sites taken down faster.
  • Modern scams are built to look convincing. A valid SSL padlock, a polished template, stock photos, fake reviews, and a trust badge can all be added in minutes and prove nothing about who runs the site. Scammers buy cheap domains, clone real designs, and copy legal pages wholesale. That's exactly why an automated review that checks the domain's age, hosting, blacklists, and behaviour — rather than just how the page looks — is more reliable than a first impression.
  • Yes. 1 of 92 antivirus and blocklist engines in our malware network flagged ph67c.info, 1 of them as outright malicious. Even a single detection from a reputable engine is a meaningful warning, and multiple detections rarely happen by accident.
  • No — ph67c.info is not currently on the major browser blocklist feeds that Chrome, Safari, Firefox, and Edge rely on. Note that blocklists can lag behind brand-new scam domains, so "not listed" is reassuring but not a guarantee on its own.
  • ph67c.info is 3 months old, registered on March 26, 2026 through Name.com, Inc.. Scam sites are very often freshly registered and short-lived, so an age under six months is a reason for extra caution.
  • ph67c.info resolves to an IP operated by Cloudflare, Inc. in US (Content Delivery Network). Hosting location alone doesn't make a site good or bad — but hosting that doesn't match a brand's claimed country, or that sits on networks known for abuse, is one of the many signals we weigh alongside the verdict above.
  • This report is a record of the scan run on July 23, 2026, and the verdict reflects that point in time. Scam sites change fast — they can go live, get flagged, or vanish within days — so if you believe something about ph67c.info has changed, MalwareTips staff can run a fresh scan that re-checks every signal from scratch and republishes an updated verdict.
Recently scanned

Other Dangerous reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This automated risk assessment reflects the evidence available at scan time. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.