ScanMalware.com

Security Scan Report: damynghecongquyen.com

Site favicon
Submitted: Sep 17, 2026, 5:47:35 PMCompleted: Sep 17, 2026, 5:48:29 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Legitimate-looking Vietnamese stonemason WordPress site, but a CRITICAL EtherHiding malware IDS alert, malware-flagged third-party resource xaz2.com and a malware IoC on the primary domain indicate compromise — avoid.

Risk Factors (5)
CRITICAL IDS malware alert indicating EtherHiding C2/exfiltration activity
Malware-classified third-party resource loaded by the page (xaz2.com / iclickfix)
Primary domain flagged as malware loader in threat-intel feeds
Outbound blockchain RPC queries typical of blockchain-based malware staging
Site likely compromised (legitimate stone-carving business content with injected malicious scripts)
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'damynghecongquyen.com' uses the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'damynghecongquyen' spans 17 characters split between five vowels and 12 consonants. Splitting it apart reveals seven words: da, my, ng, he, cong, quy, en. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://damynghecongquyen.com

Page Load Overview

7.02s
Total Load Time
5.0 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:8,877 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service64% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
64%
blog personal website
53%
corporate
35%
adult content
33%
entertainment media
32%

Detected Features

Login Form
Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
28103.121.90.226Vietnam
AS135967Bach Kim Network solutions Join stock company
374.125.29.95Google · CDNUnited States
AS15169Google LLC
3142.251.127.97Google · CDNUnited States
AS15169Google LLC
335.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
3142.251.151.4Google · CDNUnited States
AS15169Google LLC
3142.251.156.4Google · CDNUnited States
AS15169Google LLC
3142.251.155.4Google · CDNUnited States
AS15169Google LLC
3142.251.150.119Google · CDNUnited States
AS15169Google LLC
12132--

Detected Technologies13

WordPressv7.0.2
100%
PasswordField
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
Google-AnalyticsvUniversal
100%
PHP
50%
MySQL
50%
Litespeed Cache
40%
LiteSpeed
40%
HTTP/3
40%
WooCommerce
20%
Google Analytics
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EFE22B32D1D044933F1ECB5EA7F1B32CB554A625C512A7BBB0B9349C08A99F710A762E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:r9i5Q62I/xE6x4g5bn/39ahW9Zdyp8VHHpu:JiCfh4ypCu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:34120:oMCUlLUsnNB0iZIQGWBUYDElCAU4DALAMgJjBO1gijRDwNlLB+RMBEmmQAMRgUBDM8VFYgAgEUDBCSlLahCJaCgksTLAqNBC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff81f1e3d9819fff
Perceptual Hash:ec67921bd19469d8
Difference Hash:3b2f272723232f8e
Wavelet Hash:9981c1c1d1819fff
Color Hash:#87c58f

Other Hashes

Crop Resistant:3b2f272723232f8e,1595b9b8b1a54422,25575a1137069445,c7880823ab762d99,d49e014d8b4d2f96,4b6a68684161d8c0

Scan History

Scan history not available

Unable to load historical scan data