Is phe18.io safe?

suspiciouslow confidence
33/100

context safety score

A score of 33/100 indicates multiple risk signals were detected. This entity shows patterns commonly associated with malicious intent.

identity
60
behavior
55
content
14
graph
30

8 threat patterns detected

medium

encoded payload

suspicious base64-like blobs detected in page content

high

malicious redirect

The scanned domain phe18.io serves content that immediately redirects/proxies from phe18.cc. The canonical URL, all internal links, pingback endpoint, RSS feeds, and all asset references point to phe18.cc rather than phe18.io. The scanned domain appears to be a shadow/mirror domain routing traffic to the primary domain without disclosure, a common technique to evade domain-level blocklists. (location: page.html:8 (pingback), page.html:15 (canonical href=https://phe18.cc/), page.html:20 (og:url), metadata.json (url=https://phe18.io vs content canonical=https://phe18.cc))

high

malicious redirect

External JavaScript loaded from third-party domain axx.hellobabygirl.live — an opaque, unverifiable domain serving a script named adx_phe18.js with full DOM access. This script is loaded with no integrity (SRI) hash and executes in the page context, capable of injecting redirects, harvesting clicks, or loading further payloads. The domain name pattern (axx + suggestive subdomain) is consistent with ad-fraud or malvertising infrastructure. (location: page.html:1469 (https://axx.hellobabygirl.live/axx/js/adx_phe18.js), page.html:34 (dns-prefetch for //axx.hellobabygirl.live))

medium

hidden content

Tag links are dynamically injected via jQuery AJAX from the WordPress REST API (wp-json/wp/v2/tags). Tags beyond the first 10 are rendered as anchor elements with class 'hidden_tags' and immediately hidden via jQuery .hide(). This technique allows the site to serve hidden hyperlinks to search engine crawlers and AI agents that do not execute JavaScript, while concealing them from human visitors — a classic SEO cloaking and hidden-link injection pattern. (location: page.html:366-409 (script block injecting hidden_tags anchors), page.html:389 ($('a.hidden_tags').hide()))

medium

social engineering

The 'Upload video' button in the header and mobile sidebar navigation links directly to https://tuoi69hd.net/myacount/?action=register — an external domain's user registration page. This cross-site registration link is presented as a native site feature, luring users to create accounts on a separate, unvetted third-party adult site without clear disclosure that they are leaving phe18.io/phe18.cc. (location: page.html:265-266, page.html:1337-1338)

medium

brand impersonation

The site impersonates or aggregates brand identities of well-known adult platforms (Pornhub, Xhamster, XNXX, Xvideos, Tube8, Bangbros, Chaturbate, Rule34) as navigation category labels, creating the false impression of affiliation with or authorization by those brands. This is a common pattern on piracy/scraper sites to attract search traffic and deceive users into believing they are accessing official content. (location: page.html:230-245 (menu items for Xhamster, XNXX, Xvideos, Tube8, Bangbros, Chaturbate, Rule34, Pornhub), page.html:1394-1409)

low

hidden content

All thumbnail images are loaded as 1x1 transparent SVG placeholders in the src attribute, with the real image URL stored in the data-src attribute for lazy loading. While this is a standard performance technique, it also means the real image URLs and content are not visible to non-JavaScript crawlers or AI agents parsing the raw HTML, creating a discrepancy between what an agent sees and what a human browser renders. (location: page.html:434, 458, 482, 506, etc. (all post thumbnail img tags with src=data:image/svg+xml placeholder and data-src pointing to real image))

low

hidden content

HTML comment at the very end of the page leaks internal server-side cache metrics including hit/miss ratios, store read/write counts, SQL query counts, and millisecond timing data. This information disclosure could assist attackers in fingerprinting the caching infrastructure (object-cache-pro with phpredis client) and planning timing-based or cache-poisoning attacks. (location: page.html:1484 (<!-- plugin=object-cache-pro client=phpredis metric#hits=8230 ... -->))

API

curl https://api.brin.sh/domain/phe18.io

FAQ: how to interpret this assessment

Common questions teams ask before deciding whether to use this domain in agent workflows.

Is phe18.io safe for AI agents to use?

phe18.io currently scores 33/100 with a suspicious verdict and low confidence. The goal is to protect agents from high-risk context before they act on it. Treat this as a decision signal: higher scores suggest lower observed risk, while lower scores mean you should add review or block this domain.

How should I interpret the score and verdict?

Use the score as a policy threshold: 80–100 is safe, 50–79 is caution, 20–49 is suspicious, and 0–19 is dangerous. Teams often auto-allow safe, require human review for caution/suspicious, and block dangerous.

How does brin compute this domain score?

brin evaluates four dimensions: identity (source trust), behavior (runtime patterns), content (malicious instructions), and graph (relationship risk). Analysis runs in tiers: static signals, deterministic pattern checks, then AI semantic analysis when needed.

What do identity, behavior, content, and graph mean for this domain?

Identity checks source trust, behavior checks unusual runtime patterns, content checks for malicious instructions, and graph checks risky relationships to other entities. Looking at sub-scores helps you understand why an entity passed or failed.

Why does brin scan packages, repos, skills, MCP servers, pages, and commits?

brin performs risk assessments on external context before it reaches an AI agent. It scores that context for threats like prompt injection, hijacking, credential harvesting, and supply chain attacks, so teams can decide whether to block, review, or proceed safely.

Can I rely on a safe verdict as a full security guarantee?

No. A safe verdict means no significant risk signals were detected in this scan. It is not a formal guarantee; assessments are automated and point-in-time, so combine scores with your own controls and periodic re-checks.

When should I re-check before using an entity?

Re-check before high-impact actions such as installs, upgrades, connecting MCP servers, executing remote code, or granting secrets. Use the API in CI or runtime gates so decisions are based on the latest scan.

Learn more in threat detection docs, how scoring works, and the API overview.

Last Scanned

March 4, 2026

Verdict Scale

safe80–100
caution50–79
suspicious20–49
dangerous0–19

Disclaimer

Assessments are automated and may contain errors. Findings are risk indicators, not confirmed threats. This is a point-in-time assessment; security posture can change.

start scoring agent dependencies.

integrate brin in minutes — one GET request is all it takes. query the api, browse the registry, or download the full dataset.