Security Report: visamacau.vn - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/22cefe1c-ecac-4706-b071-ea016553fd7e Domain and IP registration (RDAP)/api/v1/rdap/22cefe1c-ecac-4706-b071-ea016553fd7eHow often this domain was scanned/api/v1/domain/stats/visamacau.vn Scan history for this domain/api/v1/domain/history/visamacau.vn?limit=15

This website contacted 5 IPs in 3 countries across 4 domains to perform 37 HTTP transactions. The main domain is visamacau.vn.

Submitted URL: https://visamacau.vn

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

A 1-day-old visa site carrying an injected ClickFix kit: a fake Cloudflare 'Human Verification' overlay tells Windows users to press Win+X, open Terminal, paste and hit Enter to run malware. CRITICAL YARA + IDS + IoC hits.

Risk Factors (6)

Fake Cloudflare-style 'Human Verification' overlay impersonating Cloudflare with fabricated Ray ID, prompting a keyboard-driven PowerShell paste (ClickFix)

Analyst-vetted ClickFix Win+X overlay kit identified in the page HTML

CRITICAL YARA hit and 4 CRITICAL Suricata malware alerts (ClickFix domain, EtherHiding exfiltration)

Multi-source (2 feeds) threat-intel match on a resource loaded by the page: checkyoubrowse.codes

Outbound links to multiple domains reported as malware loaders/iclickfix (visahalan.vn, visaanh.com, visabi.vn, visanga.vn, visaireland.vn, visanewzealand.com.vn)

Domain registered 1 day ago, unranked in Cisco Umbrella

Domain age information unavailable

Details

Page Title

Dịch vụ Visa Macau uy tín - visamacau.vn một sản phẩm của Du lịch Việt

Scan Type

public

Favicon Hash

MMH3: 792523181

MD5: b265cca6027fea58f6b32e7523630a25

Domain Name Analysis

The domain 'visamacau.vn' uses the Vietnamese country-code top-level domain (.vn) and has no subdomain. Its registrable label 'visamacau' stretches across 9 characters holding 5 vowels versus 4 consonants. Splitting it apart reveals 2 words: visa, macau. Median word length is 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.27s

Total Load Time

995 KB

Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese

Code: vi

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:vi

Text Length:6,459 chars

Detector Agreement:100%

Website Classification

Primary Category

travel tourism87% confidence

Type: spa

Method: ml+structural

All Detected Categories

travel tourism

87%

government public service

72%

corporate business

68%

adult content

38%

corporate

35%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	103.104.122.124	Vietnam	AS135932Viet Storage Technology Joint Stock Company
7	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
7	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
7	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
37	5	-	-