Security Scan Report: cnewlab.vn

Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 3 countries across 9 domains to perform 148 HTTP transactions. The main domain is cnewlab.vn.

Submitted URL: https://cnewlab.vn

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

A 10-year-old Vietnamese cosmetics site whose own domain is flagged as 'clearfake' malware by two feeds and which triggers a CRITICAL C2 SSL-certificate IDS alert; its scripts silently call multiple BSC blockchain RPC nodes, indicating a compromised page delivering malicious/injected code. Avoid.

Risk Factors (4)
Malware threat-intelligence match (multi-source) on the scanned domain itself
CRITICAL IDS/Suricata alert for a malicious SSL certificate associated with C2 infrastructure
Unexplained blockchain/BSC testnet RPC calls from a cosmetics e-commerce page (crypto-drainer / injected-script signature)
Unranked domain reputation despite a 10-year-old registration, inconsistent with the brand image it claims
Domain age information unavailable

Details

Page Title

Trang chủ

Scan Type

public

Domain Name Analysis

Domain 'cnewlab.vn' uses the Vietnamese country-code top-level domain (.vn) and has no subdomain. The second-level label 'cnewlab' is 7 characters long holding two vowels versus 5 consonants. Segmentation suggests 3 words: c, new, lab. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cnewlab.vn

Page Load Overview

12.45s
Total Load Time
10.5 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:6,062 chars
Detector Agreement:75%

Website Classification

Primary Category

healthcare medical80% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
80%
news/blog
35%
corporate
35%

Detected Features

Articles
Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13103.1.236.168Vietnam
AS45544SUPERDATA-VN
9142.251.110.95Google · CDNUnited States
AS15169Google LLC
9192.178.183.97Google · CDNUnited States
AS15169Google LLC
949.213.95.222Vietnam
AS38244VNG Corporation
9104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
915.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
93.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
952.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
9142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
9104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
14816--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FE643910B6F71C7A106F728ED082234CA3DFC793D6A157F5B6BE029967A8DC93693148

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:raY50PEFmkk8KkcDieGPIW+bdutbTd5B0ornmn779XTfUcgmuJ/v1vPnk4Ug+rce:raGESAnABTFO779jfUcgmev1nFns

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:333366:EIgaWqhvjoYBgFRAAuCRCMZikSFIBAC0hDoalESgZiKRFCdWpAkshiRVJBxlXUC0MQCFMcPNgCAQN5QQyh0Bh0wpgEDAIwGM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefeffe7e7fffefe
Perceptual Hash:d5aa559d2255aa55
Difference Hash:0000000808000000
Wavelet Hash:32323a220e0e0e0e
Color Hash:#9953ac

Other Hashes

Crop Resistant:0000000808000000

Scan History

Scan history not available

Unable to load historical scan data