Security Report: visanhat.net - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/46a470d7-14b5-4817-bf9f-9d5a25feac71 Domain and IP registration (RDAP)/api/v1/rdap/46a470d7-14b5-4817-bf9f-9d5a25feac71How often this domain was scanned/api/v1/domain/stats/visanhat.net Scan history for this domain/api/v1/domain/history/visanhat.net?limit=15

This website contacted 5 IPs in 3 countries across 4 domains to perform 37 HTTP transactions. The main domain is visanhat.net and was registered 1 year 6 months ago.

Submitted URL: https://visanhat.net

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate-looking Vietnamese visa site whose page has been compromised with a ClickFix kit: fake Cloudflare 'Human Verification' overlay telling Windows users to paste commands into Terminal, plus CRITICAL malware IDS alerts and malicious third-party resources.

Risk Factors (6)

Injected fake 'Human Verification' / Cloudflare-style challenge overlay with a fabricated Ray ID (df37d82e266bd09e)

Social-engineering instructions to paste attacker-supplied text into Windows Terminal (ClickFix)

CRITICAL IDS alerts for EtherHiding exfiltration and ClickFix command-and-control domain gateway.tenderly.co

Multi-feed threat-intel match on malicious host checkyoubrowse.codes loaded by the page

Outbound links from the page to domains flagged with malware loaders (visahalan.vn, visaanh.com, visabi.vn, visahongkong.com.vn, visaireland.vn, visabalan.vn, visanewzealand.vn, visanga.vn)

Blockchain RPC endpoints (polygon.gateway.tenderly.co, polygon-public.nodies.app) contacted by page scripts, consistent with the EtherHiding exfil pattern

Domain age information unavailable

Details

Page Title

Dịch vụ Visa Nhật Bản uy tín - visanhat.net một sản phẩm của Du lịch Việt

Scan Type

public

Favicon Hash

MMH3: 792523181

MD5: b265cca6027fea58f6b32e7523630a25

Domain Name Analysis

You're looking at domain 'visanhat.net' on the network infrastructure generic top-level domain (.net) with no subdomain. The registrable portion 'visanhat' spans 8 characters with three vowels and 5 consonants. It segments into 2 words: visa, nhat. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.41s

Total Load Time

1.1 MB

Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese

Code: vi

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:vi

Text Length:6,528 chars

Detector Agreement:100%

Website Classification

Primary Category

travel tourism95% confidence

Type: spa

Method: ml+structural

All Detected Categories

travel tourism

95%

government public service

56%

adult content

54%

education learning

54%

healthcare medical

35%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	103.104.122.124	Vietnam	AS135932Viet Storage Technology Joint Stock Company
7	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
7	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
7	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
37	5	-	-