Security Report: visahalan.vn - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/14e60952-a5c7-434f-b60b-1bb1678b7aec Domain and IP registration (RDAP)/api/v1/rdap/14e60952-a5c7-434f-b60b-1bb1678b7aecHow often this domain was scanned/api/v1/domain/stats/visahalan.vn Scan history for this domain/api/v1/domain/history/visahalan.vn?limit=15

This website contacted 10 IPs in 3 countries across 9 domains to perform 42 HTTP transactions. The main domain is visahalan.vn.

Submitted URL: https://visahalan.vn

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Legitimate-looking Vietnamese visa page on a 1-day-old domain, but CRITICAL EtherHiding malware IDS alerts, obfuscated JS and blockchain RPC/contract calls indicate an injected malware loader. Avoid interaction.

Risk Factors (6)

1-day-old domain (CRITICAL age category)

Primary domain reported as a malware loader in threat intelligence

CRITICAL IDS alert for EtherHiding malware exfiltration (x2)

Obfuscated JavaScript with encoding/decoding functions and Function() constructor

Ongoing blockchain RPC traffic and smart-contract getDomain() calls consistent with a blockchain-hosted malware loader

Outbound links to multiple domains flagged as iclickfix malware

Domain age information unavailable

Details

Page Title

Dịch vụ Visa Hà Lan uy tín - visahalan.vn một sản phẩm của Du lịch Việt

Scan Type

public

Favicon Hash

MMH3: 792523181

MD5: b265cca6027fea58f6b32e7523630a25

Domain Name Analysis

Domain 'visahalan.vn' uses the Vietnamese country-code top-level domain (.vn) while skipping any subdomain. Its registrable label 'visahalan' stretches across 9 characters holding 4 vowels versus 5 consonants. Tokenizing the label suggests three words: visa, hal, an. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

15.27s

Total Load Time

1.1 MB

Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese

Code: vi

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:vi

Text Length:5,689 chars

Detector Agreement:100%

Website Classification

Primary Category

education learning91% confidence

Type: spa

Method: ml+structural

All Detected Categories

education learning

91%

travel tourism

89%

government public service

52%

adult content

49%

corporate

35%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	103.104.122.124	Vietnam	AS135932Viet Storage Technology Joint Stock Company
4	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
4	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
4	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
4	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
42	10	-	-