ScanMalware.com

Security Scan Report: amb888vip3.com

Redirected to: https://amb888vip3.com/wp-login.php?redirect_to=https%3A%2F%2Famb888vip3.com%2Fwp-admin%2Fcustomize.php%3Furl%3Dhttps%3A%2F%2Famb888vip3.com%2F%26autofocus%255Bsection%255D%3Dmenu_locations&reauth=1

Site favicon
Submitted: Jan 28, 2026, 12:33:28 PMCompleted: Jan 28, 2026, 12:34:50 PMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 1 domain to perform 25 HTTP transactions. The main domain is amb888vip3.com and was registered NaN years ago.

Submitted URL: https://amb888vip3.com/wp-admin/customize.php?url=https://amb888vip3.com/&autofocus%5Bsection%5D=menu_locations

Effective URL: https://amb888vip3.com/wp-login.php?redirect_to=https%3A%2F%2Famb888vip3.com%2Fwp-admin%2Fcustomize.php%3Furl%3Dhttps%3A%2F%2Famb888vip3.com%2F%26autofocus%255Bsection%255D%3Dmenu_locations&reauth=1Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Confirmed phishing scam; avoid any interaction and report the site.

Risk Factors
Brand new domain (<7 days) – high likelihood of phishing
Compromised WordPress installation used for credential harvesting
Credential harvesting form (password-only field)
Domain age information unavailable

Details

Page Title

Đăng nhập ‹ amb888vip3 — WordPress

Scan Type

public

Language

🇻🇳

VI

(80% confidence)

Category

news media journalism

(30%)

Domain Information

The domain 'amb888vip3.com' uses the commercial generic top-level domain (.com) without a subdomain. The second-level label 'amb888vip3' is 10 characters long split between 2 vowels and four consonants; bonus characters include 4 digits. Segmentation suggests 4 words: amb, 888, vip, 3. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://amb888vip3.com/wp-admin/customize.php?url=https://amb888vip3.com/&autofocus%5Bsection%5D=menu_locations

Page Load Overview

9.99s
Total Load Time
25
HTTP Requests
1
Domains
6 KB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

Language Code:vi
Detection Confidence:80%
Script Type:Unknown
HTML Lang Attribute:vi
Text Length:241 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism30% confidence
Type: spa
Method: ml+structural

All Detected Categories

news media journalism
30%
technology software
29%
documentation technical
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12172.67.133.172United States
AS13335Cloudflare, Inc.
12104.21.14.9United States
AS13335Cloudflare, Inc.
252--

Detected Technologies9

PasswordField
100%
JQueryv3.7.1
100%
WordPress
75%
Cloudflare Bot Management
55%
PHP
50%
MySQL
50%
HTTP/3
40%
HSTS
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D842C79A5C6ECC17D51107C8A5A9F2DC913FD035D30BC886B2BF82497BB6EDC0863A59

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:CV8b6bcb56lglpV1fJiykgXCoJvEotl3T5WbS18P1Cnx/Rl:mbRSHV1fJiykgXCoJvEotl3T5WbS18PU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12951:KAKDTUFiAliEHDD3AIgkRQKUAoKIlVeAGVN9E2EYgA6AwhYYBpCiBZCraJBYBKgkQTLZzZEwg0FAEquC1gSwABhBjhEySYoQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7dbf7efffffff
Perceptual Hash:e626333366cccc99
Difference Hash:0808322448000000
Wavelet Hash:07071f17071f0f0f
Color Hash:#40bf46

Other Hashes

Crop Resistant:0808322448000000

Scan History

Scan history not available

Unable to load historical scan data