Security Report: nguyenthanhluong.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/10958504-2b29-46ee-b078-ca6ffbbcf49b Domain and IP registration (RDAP)/api/v1/rdap/10958504-2b29-46ee-b078-ca6ffbbcf49bHow often this domain was scanned/api/v1/domain/stats/nguyenthanhluong.com Scan history for this domain/api/v1/domain/history/nguyenthanhluong.com?limit=15

This website contacted 17 IPs in 2 countries across 9 domains to perform 57 HTTP transactions. The main domain is nguyenthanhluong.com and was registered 7 months ago.

Submitted URL: https://nguyenthanhluong.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised flashlight shop serving an IClickFix/EtherHiding loader: obfuscated script pulls a stage from an Ethereum Sepolia contract via zvh4.com and tenderly.co, with CRITICAL malware IDS alerts and a stealer flag on the domain. Avoid.

Risk Factors (5)

Known malicious ClickFix / EtherHiding kit injected into the page (analyst-vetted roster match)

Multiple CRITICAL malware IDS alerts for ClickFix and EtherHiding command infrastructure

Obfuscated JavaScript that decodes and contacts blockchain-contract-hosted payload staging (EtherHiding) via threat-feed hosts zvh4.com and sepolia.gateway.tenderly.co

Primary domain flagged as a stealer in threat intelligence (single-source, unverified)

Injected gambling/casino SEO spam content on a site whose real business is selling flashlights — signs of site compromise

Domain age information unavailable

Details

Page Title

Home - Điện máy nga lương

Scan Type

public

Favicon Hash

MMH3: 1198047028

MD5: 000bf649cc8f6bf27cfb04d1bcdcd3c7

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'nguyenthanhluong.com' is registered while skipping any subdomain. Count 16 characters in 'nguyenthanhluong' split between five vowels and eleven consonants. Breaking it apart gives four words: nguyen, thanh, lu, ong. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.37s

Total Load Time

3.7 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:46%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:16,425 chars

Detector Agreement:67%

Language mismatch: Declared as en-US but detected as de

Website Classification

Primary Category

gambling betting98% confidence

Type: spa

Method: ml+structural

All Detected Categories

gambling betting

98%

entertainment media

96%

finance banking

89%

blog personal website

85%

technology software

83%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	198.23.48.184	United States	AS14555LiquidNet US LLC
3	198.23.51.113	United States	AS14555LiquidNet US LLC
3	142.250.154.97Google · CDN	United States	AS15169Google LLC
3	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
3	92.123.104.137Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	216.239.32.36Google · CDN	United States	AS15169Google LLC
3	23.50.131.221Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
3	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
3	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
57	17	-	-