Security Scan Report: dongygiatruyenxuantho.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 6 domains to perform 81 HTTP transactions. The main domain is dongygiatruyenxuantho.com and was registered 10 years ago.

Submitted URL: https://dongygiatruyenxuantho.com/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Compromised Vietnamese herbal site: its own domain is flagged for iclickfix malware and it loads resources flagged as OSX malware in multiple feeds, with injected casino spam content.

Risk Factors (4)
Content-malware threat-intel match on the primary domain (iclickfix)
Two third-party resources on the page flagged as OSX malware by multiple independent feeds
Injected gambling/casino SEO-spam text and 'Mostbet' meta description inconsistent with the page's own content
Low legitimacy/ranking profile despite a 10-year-old domain, indicating resource compromise
Domain age information unavailable

Details

Page Title

Đông Y Xuân Tho - Đông Y Gia Truyền Xuân Tho

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'dongygiatruyenxuantho.com' is registered while skipping any subdomain. Count 21 characters in 'dongygiatruyenxuantho' with eight vowels and 13 consonants. Word splitting yields seven words: do, ngy, gia, tru, yen, xuan, tho. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dongygiatruyenxuantho.com/

Page Load Overview

14.90s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:4,644 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical92% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
92%
corporate
35%

Detected Features

Login Form
Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21150.95.109.197Vietnam
AS131392GMO-Z.com Runsystem Joint Stock Company
20142.251.14.97Google · CDNUnited States
AS15169Google LLC
20216.239.34.36Google · CDNUnited States
AS15169Google LLC
20142.251.127.97Google · CDNUnited States
AS15169Google LLC
814--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T199040AE2C56F1836039A73CAD328764DF5479A32DB824DF8F2BD82196F82FD14917219

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:HOR8yc9NeEahANNAoATqAbRudKssApcP2kPZN/d/7uIvfTUipBBAN5eHMhbAkLE:uR8/Ew8tbbRudKssApcP21s9

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:178640:YoOMJQCEB3gNJwINGASRSEgQCGFIEiSA06IBAMRRtchAkFAEORSarF0YCCxcJABQAARQgRABTNQAGU8CiE/wcw4UGKAIIKCY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c70000e3ffe7e3ff
Perceptual Hash:a43c92b69c65c71e
Difference Hash:2c3c02062f0f8fa6
Wavelet Hash:870000e3e3e3e3ff
Color Hash:#d24e2d

Scan History

Scan history not available

Unable to load historical scan data