Security Report: visanewzealand.vn - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b6f47cc3-f234-4a2b-97da-b0686fef210e Domain and IP registration (RDAP)/api/v1/rdap/b6f47cc3-f234-4a2b-97da-b0686fef210eHow often this domain was scanned/api/v1/domain/stats/visanewzealand.vn Scan history for this domain/api/v1/domain/history/visanewzealand.vn?limit=15

This website contacted 5 IPs in 3 countries across 4 domains to perform 37 HTTP transactions. The main domain is visanewzealand.vn.

Submitted URL: https://visanewzealand.vn

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised Vietnamese visa site carrying a roster-confirmed ClickFix kit: a fake Cloudflare 'Human Verification' overlay instructs Windows users to paste attacker PowerShell commands. Malware IoCs on the primary domain and CRITICAL IDS ClickFix/EtherHiding alerts.

Risk Factors (6)

Injected ClickFix 'Human Verification' overlay tricking Windows users into opening Terminal and pasting attacker-controlled commands

Fake Cloudflare-style verification UI with fabricated Ray ID

Malware-typed match on the page's own primary domain (unknown loader)

CRITICAL and HIGH IDS malware/C2 and Spamhaus alerts tied to page traffic (ClickFix domain, EtherHiding exfiltration)

Inline scripts using encoding/decoding functions (190 DOM, 6 crypto APIs) and 2 Function() constructor calls — obfuscation consistent with the injected kit

Domain registered 1 day ago and unranked

Domain age information unavailable

Details

Page Title

Dịch vụ Visa New Zealand uy tín - visanewzealand.vn một sản phẩm của Du lịch Việt

Scan Type

public

Favicon Hash

MMH3: 792523181

MD5: b265cca6027fea58f6b32e7523630a25

Domain Name Analysis

Domain 'visanewzealand.vn' uses the Vietnamese country-code top-level domain (.vn) with no subdomain. The second-level label 'visanewzealand' is 14 characters long holding six vowels versus eight consonants. Segmentation suggests three words: visa, new, zealand. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.83s

Total Load Time

1.0 MB

Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese

Code: vi

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:vi

Text Length:6,313 chars

Detector Agreement:100%

Website Classification

Primary Category

education learning95% confidence

Type: spa

Method: ml+structural

All Detected Categories

education learning

95%

travel tourism

86%

government public service

37%

corporate

35%

healthcare medical

31%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	103.104.122.79	Vietnam	AS135932Viet Storage Technology Joint Stock Company
7	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
7	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
7	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
37	5	-	-