Security Scan Report: shopbanghe.vn

Site favicon
Submitted: Completed: publiccompleted
This website contacted 51 IPs in 5 countries across 29 domains to perform 235 HTTP transactions. The main domain is shopbanghe.vn.

Submitted URL: https://shopbanghe.vn

AI Security Verdict

High Risk

Confidence: 95%

9
Risk Score

Legitimate-looking Vietnamese furniture shop whose pages are infected with a ClearFake/EtherHiding loader (hunting rule + kit roster + critical IDS alert) that pulls malware from a blockchain contract. Do not visit.

Risk Factors (5)
ClearFake/EtherHiding first-stage loader injected into the page
Critical network IDS alert for EtherHiding exfiltration
Obfuscated JavaScript resolving next-stage payload from blockchain smart contracts
Domain reported as hosting an unknown malware loader (single-source, unverified)
Third-party malicious hosts loaded by the page (clearfake/malware feeds)
Domain age information unavailable

Details

Page Title

KenDecor - Shopbanghe.vn - shop bàn ghế nhà hàng

Scan Type

public

Domain Name Analysis

The domain name 'shopbanghe.vn' uses the Vietnamese country-code top-level domain (.vn) while skipping any subdomain. The second-level label 'shopbanghe' is 10 characters long containing three vowels alongside seven consonants. Word splitting yields three words: shop, bang, he. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Nội thất cafe Giới thiệu Nội thất nhà hàng ¡ _ Nội thất Khách Sạn Tintức Liênhệi: _ Bộ Sưu Tập 2019 Sản phẩm bán chạy Tin khuyến mãi Tính Điểm HòaVốn _ Khai toan mức đẩu tư 0 i} TJENSSWSTE” _E*f...

Page Load Overview

80.49s
Total Load Time
7.1 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:4,076 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking94% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
94%
government public service
66%
adult content
57%
travel tourism
56%
corporate business
50%

Detected Features

Login Form
Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
35103.110.128.123Vietnam
AS150846Room 1508, 15th Floor, Vincom Center Building, 72 Le Thanh Ton, Ben Nghe Ward, District 1,
4142.251.110.95Google · CDNUnited States
AS15169Google LLC
4142.251.13.97Google · CDNUnited States
AS15169Google LLC
4185.111.111.157Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
4142.251.156.4Google · CDNUnited States
AS15169Google LLC
4157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
4142.251.151.119Google · CDNUnited States
AS15169Google LLC
4216.239.32.36Google · CDNUnited States
AS15169Google LLC
4142.251.127.154Google · CDNUnited States
AS15169Google LLC
4142.250.154.94Google · CDNUnited States
AS15169Google LLC
23551--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E13496F3419D243A132FC3E0A465B6CDF6874907EACAC0A1B3EC97ECDBD5E526212654

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:dc3GOtzyh4Iy8TXGH5u7EfE+zeuHExc7tzRCgEDx5zPjEDdDvTjqfNuaz6UlL/83:l+Lvu7EfE+zeuHExc7tzRCgEDx2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:235450:IitUkIEWUQww8YYEgGFMEtAdCpRBUkIABgMjJDAUEGJUJEqgoYMhF5IMEAlL0IoyF6YkCAgYACRGqGQDJacQYeIIDQDTmCyk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff001f3f2100ffff
Perceptual Hash:8a0af56fe291849f
Difference Hash:ce71f1d949659a0e
Wavelet Hash:ff001e0f0000ffff
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data