Security Scan Report: mface-book.com.vn

Redirected to:
https://mface-book.com.vn/PVBYqFNcPRP?xmZ
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 5 domains to perform 13 HTTP transactions. The main domain is mface-book.com.vn.

Submitted URL: https://mface-book.com.vn/PVBYqFNcPRP

Effective URL:
https://mface-book.com.vn/PVBYqFNcPRP?xmZ
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Facebook-look-alike domain flagged as phishing by two feeds; the page poses as a Google Drive download for exam papers and urges users to download a 'virus-scanned' file. Avoid downloading anything.

Risk Factors (5)
Two phishing threat-intelligence matches (domain-level and URL-path-level) from separate feeds
Typosquat-style hostname imitating facebook.com.vn
Impersonation of Google Drive download/terms-of-service interface on a non-Google domain
Unverifiable 'virus scanned, safe to download' claim used to lower user guard
Obfuscator-usage IDS heuristics (informational, but consistent with a packed lure page)
Domain age information unavailable

Details

Page Title

Bộ đề thi thử THPT 2027 - Phát triển Đề thi chính thức môn Tiếng Anh 2026

Scan Type

public

Domain Name Analysis

Within the Vietnamese country-code top-level domain (.com.vn), 'mface-book.com.vn' is registered and has no subdomain. The registrable portion 'mface-book' spans 10 characters containing four vowels alongside 5 consonants; bonus characters include 1 hyphen. It segments into 3 words: m, face, book. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mface-book.com.vn/PVBYqFNcPRP

Page Load Overview

3.53s
Total Load Time
264 KB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:370 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning68% confidence
Type: static
Method: ml+structural

All Detected Categories

education learning
68%
technology software
67%
healthcare medical
61%
documentation technical
55%
government public service
46%

Detected Features

OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7206.206.126.142Singapore, Singapore
AS16276OVH SAS
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1142.251.13.94Google · CDNUnited States
AS15169Google LLC
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
137--

Detected Technologies6

Nginxv1.24.0
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E442FA2422F1043C64934118DBFE754BADAA9157D50ACE1876EC02B17F82CDAEEB32F4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:5gXeC3mQGV00juPgnR9mDB0fMbMjfU9p/UJdDaDX/Ty9osBRVPsDFnrReKRYVO:5gXeC3rGO66p/yDE71fDFrRbj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12338:qANXgDNdEEmAADBBABDJ/AjGGIACzmBHxh9HAxAORYBExgLwsAQKBWlVFFXCAiUEL4YIACCYAkEKpgBjq4FTCAlIEkQwkGkF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fcc3c3c3e7e7ffff
Perceptual Hash:f25ad8d252d8d25a
Difference Hash:cd1e07064c681008
Wavelet Hash:7c01c34324e7717f
Color Hash:#35d22d

Other Hashes

Crop Resistant:cd1e07064c681008

Scan History

Scan history not available

Unable to load historical scan data