Security Scan: Cảnh tiên farm cung cấp thực phẩm sạch đến ta

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4662ac8d-db6e-47bc-9863-32eca724c97b Domain and IP registration (RDAP)/api/v1/rdap/4662ac8d-db6e-47bc-9863-32eca724c97bHow often this domain was scanned/api/v1/domain/stats/canhtienfarm.com Scan history for this domain/api/v1/domain/history/canhtienfarm.com?limit=15

This website contacted 25 IPs in 2 countries across 12 domains to perform 114 HTTP transactions. The main domain is canhtienfarm.com and was registered 1 year 6 months ago.

Submitted URL: https://canhtienfarm.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate-looking Vietnamese farm site that is compromised: packed scripts load a ClickFix 'Human Verification' overlay via a Polygon smart contract (EtherHiding), confirmed by four CRITICAL YARA hits, kit roster and CRITICAL IDS alerts.

Risk Factors (5)

Compromised WordPress/WooCommerce site serving an injected ClickFix phishing overlay kit

Obfuscated third-party script chain with blockchain-derived payload hosting (EtherHiding)

Threat-intel match on the primary domain itself (iclickfix malware)

Unranked third-party script host cloud-browse.codes corroborated by three feeds as an exploit kit

CRITICAL network IDS malware/exfiltration alerts

Domain age information unavailable

Details

Page Title

Cảnh tiên farm cung cấp thực phẩm sạch đến tay người tiêu dùng

Scan Type

public

Favicon Hash

MMH3: -1323140080

MD5: 2b8ac1933df3459620e8231f69950f76

Domain Name Analysis

The domain name 'canhtienfarm.com' uses the commercial generic top-level domain (.com) without a subdomain. The core label 'canhtienfarm' covers 12 characters containing 4 vowels alongside 8 consonants. Breaking it apart gives 4 words: can, h, tien, farm. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.89s

Total Load Time

3.7 MB

Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese

Code: vi

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:vi

Text Length:2,338 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical83% confidence

Type: spa

Method: ml+structural

All Detected Categories

healthcare medical

83%

corporate

35%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
18	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.14.95Google · CDN	United States	AS15169Google LLC
4	142.251.14.97Google · CDN	United States	AS15169Google LLC
4	142.251.153.119Google · CDN	United States	AS15169Google LLC
4	142.251.110.94Google · CDN	United States	AS15169Google LLC
4	216.239.34.36Google · CDN	United States	AS15169Google LLC
4	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
4	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
114	25	-	-