ScanMalware.com

Security Scan Report: zshop.vn

Site favicon
Submitted: Sep 27, 2026, 5:27:48 AMCompleted: Sep 27, 2026, 5:29:05 AMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Established Vietnamese e-commerce site with same-origin login and self-branding. No impersonation, credential exfiltration, YARA, or threat-intel hits; only weak unranked/IDS informational signals.

Risk Factors (2)
Domain is not ranked in Cisco Umbrella top 1M
Three low-specificity IDS ET INFO alerts for HTTP requests to .asia domains
Safety Factors (5)
Domain has been registered for over 4 years
Site displays its own zShop brand, matching the domain
Login form is same-origin for the site's own customer account, with no impersonation or credential exfiltration
No Indicators of Compromise, YARA malware, known kit, or Safe Browsing threat detected
Content is standard Vietnamese e-commerce product/search pages with product and search forms
Domain age information unavailable

Details

Page Title

zShop - Siêu thị kỹ thuật số: Máy ảnh | Phụ kiện | Ổ cứng

Scan Type

public

Domain Name Analysis

You're looking at domain 'zshop.vn' on the Vietnamese country-code top-level domain (.vn) with no subdomain. The second-level label 'zshop' is 5 characters long with 1 vowel and 4 consonants. Splitting it apart reveals two words: z, shop. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://zshop.vn

Page Load Overview

5.69s
Total Load Time
6.1 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:15,204 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain67% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

cryptocurrency blockchain
67%
adult content
63%
e-commerce shopping
62%
gambling betting
58%
finance banking
56%

Detected Features

Login Form
Search
Products
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21104.26.6.36Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4192.178.183.132Google · CDNUnited States
AS15169Google LLC
4104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4184.24.77.64Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
4104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.20.38.200Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.14.97Google · CDNUnited States
AS15169Google LLC
4157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
4142.251.156.119Google · CDNUnited States
AS15169Google LLC
4142.250.154.149Google · CDNUnited States
AS15169Google LLC
21750--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10F14A670C1B47C2B415384F4E5E9AB1ABAC9A51FDF478910B2EC82C42FC6E965E3364D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:ol/pCyTDxkXtTRjJL3BH0/PYYeYVs5fJg0gnPZStBoz9+l8Bo6g1lw2cgpG2p5hf:i09oz9g+jo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:209239:FSyEwAIGxgMhGzqRwgkmoUIABAJgAAJvKigJiR1BBdwHtIogsAQKKaYACAAAgCl+QEAgdLUggioIAIgBDIyXRC5UAIQSTAKF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data