Security Scan Report: shared-cloud-manager.folio.io.vn

Submitted: Completed: publiccompleted
This website contacted 59 IPs in 3 countries across 28 domains to perform 2195 HTTP transactions. The main domain is io.vn.

Submitted URL: https://shared-cloud-manager.folio.io.vn/

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Analyst-vetted phishing-kit host: a Microsoft 365 alert-mail 'fail' gate serving a hidden-heading iframe decoy of Global News. The captured page is the kit's rejection screen, not its credential form.

Risk Factors (5)
Known malicious phishing kit identified by analyst-vetted roster (Microsoft 365 alert-mail fail-gate)
Critical YARA match: FailGate_Iframe_Decoy_Kit (hidden gate heading + full-page iframe decoy)
Visitor filtering / cloaking — rejected traffic gets HTTP 403 and a decoy 'Loading ...' page
Deceptive hostname ('shared-cloud-manager') on an unranked .io.vn domain
Excessive redirect chain (21 redirects, 14 cross-domain)
Domain age information unavailable

Details

Page Title

Loading ...

Scan Type

public

Domain Name Analysis

You're looking at domain 'shared-cloud-manager.folio.io.vn' on the Vietnamese country-code top-level domain (.io.vn), featuring subdomain 'shared-cloud-manager'. The second-level label 'folio' is 5 characters long with three vowels and two consonants. Word splitting yields one word: folio. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://shared-cloud-manager.folio.io.vn/

Page Load Overview

92.70s
Total Load Time
29.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:16 chars
Detector Agreement:0%

Website Classification

Primary Category

healthcare medical77% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

healthcare medical
77%
entertainment media
48%
adult content
42%
government public service
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
49104.21.75.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
37172.67.179.186Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
37192.0.66.184San Francisco, California, United States
AS2635Automattic, Inc
37104.16.160.145Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
37192.0.66.159San Francisco, California, United States
AS2635Automattic, Inc
3723.52.181.12Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
37142.251.20.157Google · CDNUnited States
AS15169Google LLC
37172.64.152.243Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
37143.204.181.116Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
372.23.245.241Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
219559--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T186111FB31251943C80339732ECA79B4D4534D4A9FFA2395C9B245676C88CB1AA8772FC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:nWATFuJUC8FsXLGnT+sX6BQtxfH4YgY3PPHj:niHcZtxfH4YgO7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1068:AAGEgAAUIAAgAAAAAAgAAAAAAQEAAAAAAgAAQAAAACAAAAAAEAAICAIQQBAAAAAAAAAAAAAAAABCCAEBAEAAQAAAAAAQAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffff8f8f8fffff
Perceptual Hash:bc43433c3f421f47
Difference Hash:6662403f3f3f3444
Wavelet Hash:0000bf838787ffd7
Color Hash:#88931f

Scan History

Scan history not available

Unable to load historical scan data