ScanMalware.com

Security Scan Report: goldplusvn.xyz

Site favicon
Submitted: Jul 1, 2026, 7:12:52 AMCompleted: Jul 1, 2026, 7:14:04 AMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 58%

3
Risk Score

Unranked 96-day-old domain showing a crypto 'mining machine' offering automatic USDT output income, with a copyright range predating the domain. No forms, IoCs, malware or phishing signals found, so scam intent is unproven — treat the investment offer with caution.

Risk Factors (4)
Crypto 'mining' page promising automatic 2% output income in USDT — classic high-yield investment scheme framing
Copyright year range (2017-2024) inconsistent with a 96-day-old domain
Unranked domain with negligible legitimacy signals (5/100)
Login/registration endpoints present (purportedly for account funding) on an unverified new domain
Safety Factors (5)
No credential, password or payment form in the captured DOM — nothing harvests data on this page
No Indicators of Compromise, JavaScript YARA hits, IDS alerts or Google Safe Browsing flags
No cross-origin credential exfiltration and no cross-origin JS network targets
External scripts come from well-known ranked CDNs (jsdelivr, staticfile) and Tawk.to chat
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

Smartchain

Scan Type

public

Domain Name Analysis

Within the open generic top-level domain (.xyz), 'goldplusvn.xyz' is registered with no subdomain. The second-level label 'goldplusvn' is 10 characters long split between two vowels and eight consonants. Segmentation suggests 4 words: gold, plus, v, n. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://goldplusvn.xyz/Orepool/index/Lang/en-us

Page Load Overview

2.88s
Total Load Time
810 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:1,082 chars
Detector Agreement:100%
Language mismatch: Declared as zh-CN but detected as en

Website Classification

Primary Category

technology software56% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
56%
cryptocurrency blockchain
56%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9217.216.32.97Singapore, Singapore
AS141995Contabo Asia Private Limited
9202.181.25.28Hong Kong
AS55933Cloudie Limited
293--

Detected Technologies6

JQueryv1.10.2
100%
PHP
50%
ThinkPHP
40%
HSTS
40%
Vue.js
30%
Tawk.to
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1178308A0E3FC473A1156809EEB8896D2F775A01BB30BC608397D5620AF45D79DD336E8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:2oLwUU2RSYhHPOCejl85CDUwhVH+upy5xl0vDfoayHT6US/Gi:2odU2RSYhHPOpBDBhHZDfRyHT6xGi

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:82210:IAMYgcgKTcEgTBakHvpSQIYYAjjTYBHw8UkHAboLAAAEAFXgqFKytgVsMBW1uIBgkT8EJGQECRAGIpKiECgHDdgoSFjkMQAQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000000ffffffff
Perceptual Hash:92322eed69692a9e
Difference Hash:658d8dd100060001
Wavelet Hash:00000000ffffffff
Color Hash:#8797c5

Other Hashes

Crop Resistant:658d8dd100060001,638d4c8d8d6d8dd3,0101010101010101

Scan History

Scan history not available

Unable to load historical scan data