Security Report: visahanquoc.net.vn - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1924ff45-1408-4393-9214-83af8aaa3b74 Domain and IP registration (RDAP)/api/v1/rdap/1924ff45-1408-4393-9214-83af8aaa3b74How often this domain was scanned/api/v1/domain/stats/visahanquoc.net.vn Scan history for this domain/api/v1/domain/history/visahanquoc.net.vn?limit=15

This website contacted 4 IPs in 3 countries across 4 domains to perform 37 HTTP transactions. The main domain is visahanquoc.net.vn.

Submitted URL: https://visahanquoc.net.vn

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Travel-visa page is compromised: an injected ClickFix 'Human Verification' overlay (Win+X/Terminal PowerShell lure) plus CRITICAL IDS/YARA hits and blockchain-RPC exfil traffic. Do not interact.

Risk Factors (5)

Known malicious ClickFix Win+X/Terminal overlay kit injected into the page (roster-anchored, CRITICAL)

High-precision YARA hit for injected fake 'Human Verification' overlay with key-press animation payload

CRITICAL IDS alerts for ClickFix C2 domain and EtherHiding exfiltration traffic

JavaScript contacts blockchain RPC endpoints associated with loader/ClickFix activity

Domain registered 1 day ago and unranked, hosting a content-injected malware overlay

Domain age information unavailable

Details

Page Title

Dịch vụ Visa Hàn Quốc uy tín - visahanquoc.net.vn một sản phẩm của Du lịch Việt

Scan Type

public

Favicon Hash

MMH3: 792523181

MD5: b265cca6027fea58f6b32e7523630a25

Domain Name Analysis

The domain name 'visahanquoc.net.vn' uses the Vietnamese country-code top-level domain (.net.vn). The registrable portion 'visahanquoc' spans 11 characters holding five vowels versus six consonants. Tokenizing the label suggests 4 words: visa, han, quo, c. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.29s

Total Load Time

1.1 MB

Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese

Code: vi

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:vi

Text Length:6,486 chars

Detector Agreement:100%

Website Classification

Primary Category

travel tourism92% confidence

Type: spa

Method: ml+structural

All Detected Categories

travel tourism

92%

government public service

45%

adult content

41%

corporate

35%

education learning

27%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	103.104.122.124	Vietnam	AS135932Viet Storage Technology Joint Stock Company
9	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
9	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
37	4	-	-