Security Scan Report: visadubai.com.vn

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 3 countries across 4 domains to perform 37 HTTP transactions. The main domain is visadubai.com.vn.

Submitted URL: https://visadubai.com.vn/

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

Compromised visa-services site injecting a ClickFix fake 'Human Verification' overlay with EtherHiding blockchain loader; CRITICAL malware IDS alerts and a multi-feed malicious script host. Do not follow its instructions.

Risk Factors (5)
Injected ClickFix / fake 'Human Verification' overlay instructing Windows users to open Terminal and run commands
EtherHiding: obfuscated JavaScript retrieves next-stage payload address from a blockchain smart contract
CRITICAL IDS alerts for malware exfiltration (EtherHiding Exfil M2)
Multi-feed malicious third-party resource loaded by the page (cloud-browse.codes)
primary domain tagged as malware in threat intelligence (single unverified source)
Domain age information unavailable

Details

Page Title

Dịch vụ Visa Dubai uy tín - visadubai.com một sản phẩm của Du lịch Việt

Scan Type

public

Domain Name Analysis

Domain 'visadubai.com.vn' uses the Vietnamese country-code top-level domain (.com.vn) while skipping any subdomain. Its registrable label 'visadubai' stretches across 9 characters holding five vowels versus four consonants. Splitting it apart reveals 2 words: visa, dubai. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://visadubai.com.vn/

Page Load Overview

4.28s
Total Load Time
991 KB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:6,580 chars
Detector Agreement:100%

Website Classification

Primary Category

travel tourism93% confidence
Type: spa
Method: ml+structural

All Detected Categories

travel tourism
93%
government public service
77%
corporate business
67%
corporate
35%
adult content
26%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9103.104.122.79Vietnam
AS135932Viet Storage Technology Joint Stock Company
7104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
735.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
7178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
7104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
375--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19B243A72419C143A413B5AD69229B72DF3AAE412CF82C4F1F3FE5298CFCBE91516261D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:JMds1Wz8K+iNFMEOFlLqqPZH0kC8om7enquQS3OISeAoplNChjWY:JUKK+6FMlFlLqqFynLojWY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:213316:IGBVgsrAkACIU9fYYJmCUAPYkutAQoEEJghQAhUYnQAwAGAbFAhcRAAaAEbwAbxIANNgEgUDiUDIiJSBiSQFAgaOsEEyBGEG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfcfc3c3fffffff7
Perceptual Hash:b03193c7c6ccccce
Difference Hash:0818163600000008
Wavelet Hash:3c040000fcfcff00
Color Hash:#1f5393

Other Hashes

Crop Resistant:0818163600000008

Scan History

Scan history not available

Unable to load historical scan data