Security Report: chessplus.edu.vn - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6d7cb664-f2e4-49a5-b9ae-f95d6e599812 Domain and IP registration (RDAP)/api/v1/rdap/6d7cb664-f2e4-49a5-b9ae-f95d6e599812 Certificate Transparency/api/v1/ct/chessplus.edu.vn How often this domain was scanned/api/v1/domain/stats/chessplus.edu.vn Scan history for this domain/api/v1/domain/history/chessplus.edu.vn?limit=15

This website contacted 49 IPs in 3 countries across 24 domains to perform 213 HTTP transactions. The main domain is chessplus.edu.vn and was registered 29 years ago.

Submitted URL: https://chessplus.edu.vn

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised chess academy site carrying a ClickFix/EtherHiding kit: fake Cloudflare 'Human Verification' overlay pushing Win+X Terminal commands, with YARA, kit-roster and CRITICAL IDS confirmation. Do not interact.

Risk Factors (5)

Injected ClickFix / EtherHiding malicious kit confirmed by analyst-vetted kit roster and YARA rule match

Fake 'Human Verification' overlay impersonating Cloudflare, instructing Windows users to open Terminal and run commands (Win+X)

EtherHiding C2 exfiltration over blockchain (EtherHiding Exfil M2, Ethereum contract get() requests, Polygon/Tenderly gateway domains)

Primary domain matches multi-feed mal ware threat intelligence (2 corroborating feeds)

Cross-origin POST exfiltration endpoint (ferma.seo-solutions.eu.cc) and third-party malware-flagged resources

Domain age information unavailable

Details

Page Title

Home - Chess Plus Academy

Scan Type

public

Favicon Hash

MMH3: -1534817081

MD5: c62e536e5fef74bafdd25b2d325643f0

Domain Name Analysis

You're looking at domain 'chessplus.edu.vn' on the Vietnamese country-code top-level domain (.edu.vn) with no subdomain. The registrable portion 'chessplus' spans 9 characters holding 2 vowels versus seven consonants. Splitting it apart reveals two words: chess, plus. Median word length comes out to 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

41.50s

Total Load Time

29.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:4,795 chars

Detector Agreement:100%

Website Classification

Primary Category

education learning91% confidence

Type: spa

Method: ml+structural

All Detected Categories

education learning

91%

education

45%

cryptocurrency blockchain

37%

corporate

35%

gambling betting

32%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
21	103.232.120.208	Vietnam	AS56150Viet Solutions Services Trading Company Limited
4	192.178.183.95Google · CDN	United States	AS15169Google LLC
4	172.67.142.245Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
4	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
4	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
4	172.67.209.248Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	172.67.165.144Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
213	49	-	-