Security Report: nguyencanhkhanh.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9c982918-cc23-48ef-b651-d07f078383ca Domain and IP registration (RDAP)/api/v1/rdap/9c982918-cc23-48ef-b651-d07f078383ca Certificate Transparency/api/v1/ct/nguyencanhkhanh.com How often this domain was scanned/api/v1/domain/stats/nguyencanhkhanh.com Scan history for this domain/api/v1/domain/history/nguyencanhkhanh.com?limit=15

This website contacted 20 IPs in 4 countries across 15 domains to perform 50 HTTP transactions. The main domain is nguyencanhkhanh.com and was registered 18 years ago.

Submitted URL: https://nguyencanhkhanh.com

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Malware-distribution risk: CRITICAL EtherHiding exfil IDS hit, Ethereum RPC endpoint, and malware IoCs on the primary domain and a loaded resource (xaz2.com). Avoid interaction.

Risk Factors (5)

CRITICAL malware IDS signature (EtherHiding exfiltration) tied to the scanned page

Primary domain flagged as malware loader by threat intelligence

Malicious third-party resource (xaz2.com / iclickfix) loaded by the page

Ethereum RPC/blockchain domain used for covert payload/exfil channels

Unranked domain with no established reputation

Domain age information unavailable

Details

Page Title

Trang chủ - nguyễn cảnh khánh

Scan Type

public

Favicon Hash

MMH3: -2140809636

MD5: 895a7a28bc49ed077ef54e65d3cb2426

Domain Name Analysis

The domain 'nguyencanhkhanh.com' uses the commercial generic top-level domain (.com) and has no subdomain. Count 15 characters in 'nguyencanhkhanh' holding four vowels versus 11 consonants. Tokenizing the label suggests five words: nguyen, can, h, khan, h. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.78s

Total Load Time

2.1 MB

Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese

Code: vi

Confidence:50%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:597 chars

Detector Agreement:100%

Language mismatch: Declared as en-US but detected as vi

Website Classification

Primary Category

social media network49% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network

49%

finance banking

37%

corporate

35%

education learning

33%

e-commerce shopping

28%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	142.251.20.97Google · CDN	United States	AS15169Google LLC
2	20.250.198.32Azure · CLOUD	Zurich, Zurich, Switzerland	AS8075Microsoft Corporation
2	103.82.64.61	Sydney, New South Wales, Australia	AS38220Amaze Intelligence
2	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.171.87.38Azure · CLOUD	Dulles, Virginia, United States	AS8075Microsoft Corporation
2	142.251.127.149Google · CDN	United States	AS15169Google LLC
2	146.19.24.104	Poland	AS201814MEVSPACE sp. z o.o.
2	142.251.153.4Google · CDN	United States	AS15169Google LLC
2	142.251.155.4Google · CDN	United States	AS15169Google LLC
2	142.251.110.94Google · CDN	United States	AS15169Google LLC
50	20	-	-