Security Scan Report: toplistgialai.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 24 IPs in 4 countries across 17 domains to perform 143 HTTP transactions. The main domain is toplistgialai.com and was registered 1 year 6 months ago.

Submitted URL: https://toplistgialai.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised site actively serving an IClickFix/EtherHiding ClickFix loader: obfuscated JS pulls a stage from an Ethereum Sepolia contract and reaches zvh4.com, with three critical malware IDS alerts and a content-malware match on the primary domain.

Risk Factors (5)
Known malicious ClickFix/EtherHiding injection on the page (compromised site serving a Windows loader)
Content-malware threat-intelligence match on the PRIMARY domain (2 corroborating feeds)
Malicious third-party domain zvh4.com corroborated by 3 feeds and named in critical IDS alerts
Obfuscated script concealing blockchain RPC endpoints and fetching a payload address from a smart contract
Domain is unranked in Cisco Umbrella and shows a low legitimacy score, so no established reputation offsets the compromise
Domain age information unavailable

Details

Page Title

Trang Chủ - Toplist Gia Lai

Scan Type

public

Domain Name Analysis

Domain 'toplistgialai.com' uses the commercial generic top-level domain (.com) with no subdomain. The second-level label 'toplistgialai' is 13 characters long holding 6 vowels versus 7 consonants. It segments into 4 words: top, list, gia, lai. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Fisher Investments Vid vilken Alder kan man gai pension med 3 miljaner kr? © How your data is used Your privacy preferences are important, That's why, based on legitimate interest, we and our part...

Page Load Overview

8.24s
Total Load Time
5.6 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:vi
Text Length:68,111 chars
Detector Agreement:60%

Website Classification

Primary Category

corporate70% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
70%
news/blog
40%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
28103.142.25.227Vietnam
AS135951Webico Company Limited
5142.251.110.97Google · CDNUnited States
AS15169Google LLC
5142.251.20.155Google · CDNUnited States
AS15169Google LLC
5185.111.111.156Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
5216.239.32.36Google · CDNUnited States
AS15169Google LLC
5142.251.127.155Google · CDNUnited States
AS15169Google LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5142.251.110.101Google · CDNUnited States
AS15169Google LLC
5142.251.20.95Google · CDNUnited States
AS15169Google LLC
5142.251.20.94Google · CDNUnited States
AS15169Google LLC
14324--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E7153A32F580142F977B4DD4A34ED30A7296970BF4D9C4E0E1D6476C8AE4EB8642E3A7

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:vRddgXc+zvgcopC2/DyBAL2lA3/qttlA3/Cogp:vRd2+OAqMqdMC3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:953561:QIwDKAmgDNSCOIVyjGoaGBKAG7QWFGAmJGqeKMEwTCEMpVDYBhgbIBaAamGFQ4ABBFAJ6AIQ4ocJJ1AWQBmoBUUC5AhVVjwg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffbdf3d3c3c3db
Perceptual Hash:ed5613394d061a6f
Difference Hash:d035752717171692
Wavelet Hash:00df91f3c3c383d3
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data