VPBank NEO

_gid

incap_ses_728_3018148

TS01818c4f

VPBank

visid_incap_3018148

_ga_89HZJ5S77Z

_ga_RVJ4XCZYHG

_ga_ZE8RGPKNBN

TS817da101027

Domain 'online.vpbank.com.vn' uses the Vietnamese country-code top-level domain (.com.vn) with subdomain 'online'. The core label 'vpbank' covers 6 characters holding 1 vowel versus 5 consonants. Tokenizing the label suggests two words: vp, bank. Median word length is three characters. No strong language cues emerged from the frequency lists.

html/ba/6c/ba6ceca9-f6d9-478d-942f-cfa183e5d6f7.html.gz

script-src 'self' 'unsafe-eval' 'unsafe-inline' https:; frame-ancestors 'self' https://*.vpbank.com.vn

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:225:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:207:0

d6a7c273e64dbd7a8fe5d0af235616d14184833a9c332b7c447c0452683676af

4ec2f3b36e546de97049306e65bab0853770d33fb0539e56fa2a4e9c24011e00

f1a61277e3f902f50ab42015d8b07218db9b7601bb0967e54a52bfdcb4fa7e81

b0fec611b1fdab49f59dae4978c184e829467e7284546e7bfc4f32e59b62e86a

e46f95284fadf261f9cfef8ee3b69d277709cdac167d52fe0de16a2be1aa7dd4

708e3446e240abe896185830c207835cecaa46dbe93cd27f6f86efc265e1378d

11db16d4fffae3815450b13332d6ac316f2c47c7dc356ec8c61a27aaea9c2f87

9d34073188446161d965f49e530ba410b6969924e27c04e418444caf0d657bd9

55332b2114fa8a79f4c24530e64755388dbc2bb34e3da9fbb955d64af9ede752

362899cee3121306f8c13746840c156934a27c51d8b076d85621644cc9a966ed

782caaa9f6fa90b4e51afd9c084ef83d14bb7d08628caee0277114487d64a4f0

b54fd0f4bb68ac5eb0c4d47141a858cb7335a89ad71eac8bbd6a4c879fe7d457

b89c916602fdcb79d00c75847cf2eae2e4329196c1dc7baaed2812143571e893

afe88dcb8f44726f51bdf7f6ed6d4c0a5d63ebe4bf4074dd4cc8aff9da182e06

width=device-width, initial-scale=1, maximum-scale=1, user-scalable=0

viewport

default-src 'self' data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tenant-caip.vpbank.com.vn https://www.googletagmanager.com https://www.google-analytics.com https://*.google.com https://*.googleapis.com https://maps.gstatic.com https://connect.facebook.net https://*.facebook.com https://www.gstatic.com; connect-src 'self' https://tenant-caip.vpbank.com.vn https://www.google-analytics.com https://analytics.google.com https://*.vpbank.com.vn; frame-src 'self' https://tenant-caip.vpbank.com.vn https://*.vpbank.com.vn; img-src 'self' data: https://caip-prod-mos-upload.s3.ap-southeast-1.amazonaws.com https://*.google.com https://*.googleapis.com https://maps.gstatic.com; media-src 'self' https://caip-prod-mos-upload.s3.ap-southeast-1.amazonaws.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com; worker-src 'self' blob:;

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

html/ba/6c/ba6ceca9-f6d9-478d-942f-cfa183e5d6f7_nodriver.html.gz

vpbank.com.vn

Abuse

Google LLC

GOOGLE


            (function (w, d, s, l, i) {
                w[l] = w[l] || [];
                w[l].push({
                    'gtm.start':
                    new Date().getTime(),
                    event: 'gtm.js'
                });
                var f = d.getElementsByTagName(s)[0],
                j = d.createElement(s),
                dl = l != 'dataLayer' ? '&l=' + l : '';
                j.async = true;
                j.src =
                    'https://www.googletagmanager.com/gtm.js?id=' + i + dl;
                f.parentNode.insertBefore(j, f);
            })(window, document, 'script', 'dataLayer', 'GTM-M3SQWTN');
        


            window.dataLayer = window.dataLayer || [];
            function gtag() {
                dataLayer.push(arguments);
            }
            gtag('js', new Date());
            gtag('config', 'G-RVJ4XCZYHG');
        

// BEGIN #VAC-2 (KHANHLV5)
            var DynamicLink = {
                TransfersListing: "/TransfersListing&/TransfersListing",
                TransfersListingToAcc: "/TransfersListing&/Transfer(-1,-1,false,TOACC)",
                TransfersListingToCardPayment: "/TransfersListing&/Transfer(-1,-1,false,CCPAYMENT)",
                TransfersListingToSelf: "/TransfersListing&/Transfer(-1,-1,false,TOSELF)",
                AccountSummary: "/AccountSummary",
                CustomAccount: "/CustomAccount&/ActiveHibernationAcc(-1)",
                CardServiceActive: "/CardService&/ActiveCard(-1)",
                CardServiceStatement: "/CardService&/CardStatement",
                CardServiceInstalment: "/CardService&/RegisterInstalmentSummary",
                CardServiceLockUnlock: "/CardService&/LockUnlockCard",
                PaymentsListing: "/PaymentsListing",
                PaymentsListingBillPay: "/PaymentsListing&/BillPay",
                PaymentsListingBillPaySecurities: "/PaymentsListing&/BillPay",
                PaymentsListingBillPayMobilePhone: "/PaymentsListing&/BillPay",
                PaymentsListingBillPayElectricity: "/PaymentsListing&/BillPay",
                PaymentsListingPayeeListing: "/PaymentsListing&/PayeeListing",
                PaymentsListingRecPaymentListing: "/PaymentsListing&/RecPaymentListing",
                OnlineSavingHomeMenu: "/OnlineSaving&/OnlinesavingHomeMenu",
                OnlineSavingSettle: "/OnlineSaving&/OnlinesavingSettle",
                OnlineSavingChangeSettle: "/OnlineSaving&/OnlinesavingChangeSettle",
                OverdraftOpen: "/Overdraft&/OverdraftOpen(-1)",
                QueryOverdraft: "/Overdraft&/QueryOverdraft",
                ChangeLimitLoan: "/Overdraft&/ChangeLimitLoan",
                SettleOverdraft: "/Overdraft&/SettleOverdraft",
                //UIUXIBMB-10190
                ConfirmDisbursement: "/Overdraft&/ConfirmDisbursement(-1)",
                //UIUXIBMB-10190
                CreditCardRegistration: "/CardService&/CreditCardRegistration",
                RegisterSupplementalCard: "/CardService&/RegisterSupplementalCard",
                RegisterCardIDC: "/CardService&/RegisterCardIDC",
                ReissuanceCard: "/CardService&/ReissuanceCard",
                ChangeResetCardPin: "/CardService&/ChangeResetCardPin",
                Ecom: "/CardService&/Ecom",
                AmountLimitCard: "/CardService&/AmountLimitCard",
                CardWhiteList: "/CardService&/CardWhiteList",
                CardCashbackRewards: "/CardService&/CardCashbackRewards",
                VPDiamondRegister: "/Utilities&/VPDiamondRegister",
                LoyaltyCard: "/Utilities&/LoyaltyCard",
                ChangeOTPMethod: "/PersonalInformation&/ChangeOTPMethod",
                ChangeUserName: "/PersonalInformation&/ChangeUserName",
                ChangePassword: "/PersonalInformation&/ChangePassword",
                ChangeServicePackage: "/PersonalInformation&/ChangeServicePackage",
                PhoneBanking: "/PersonalInformation&/PhoneBanking",
                ReceivedMessagesListing: "/ReceivedMessagesListing",
                SentMessagesListing: "/ReceivedMessagesListing&/SentMessagesListing",
                //MSA-164 - Start
                PTIPaymentInsurance: "/PaymentsListing&/BillPay",
                //MSA-164 - End
                //PP2021-2476
                GICPaymentInsurance: "/PaymentsListing&/BillPay",
                //PP2021-2476
                //PP2021-4188 s
                VBIPaymentInsurance: "/PaymentsListing&/BillPay",
                //PP2021-4188 e
                
                
                BSHPaymentInsurance: "/PaymentsListing&/BillPay",
                

                
                
                BMIPaymentInsurance: "/PaymentsListing&/BillPay",
                

                //INS-426
                OPESPaymentInsuranceCar: "/PaymentsListing&/BillPay",
                PTICarPaymentInsurance: "/PaymentsListing&/BillPay",
                //INS-426
                //NEB-6879 - Start
                ScheduledListing: "/TransfersListing&/ScheduledListing",
                //NEB-6879 - End
                // BEGIN #VAC-52 (KHANHLV5)
                LoyaltiesList: "/Loyalties&/LoyaltyHome(true,false)",
                LoyaltyGiftList: "/Loyalties&/LoyaltyHome(false,false)",
                AccountSummaryAccount: "/AccountSummary",
                AccountSummaryCard: "/AccountSummary",
                AccountSummarySaving: "/AccountSummary",
                AccountSummaryLoan: "/AccountSummary",
                // END #VAC-52 (KHANHLV5)
                // BEGIN #NEB-7421(KHANHLV5)
                CardAdditionalCreditCard: "CardService&/AdditionalCreditCard",
                CardRegisterCardIDC: "CardService&/RegisterCardIDC",
                OverdraftOpenUPL: "/Overdraft&/OverdraftOpen(-1)",
                OverdraftOpenSLO: "/Overdraft&/OverdraftOpen(-1)",
                OnlineSavingHomeBTTV: "/OnlineSaving&/OnlinesavingHomeMenu",
                OnlineSavingHomeBCTC: "/OnlineSaving&/OnlinesavingHomeMenu",
                // END #NEB-7421 (KHANHLV5)
            };

            var DynamicLinkPreLogin = {
                BranchLocator1: "/BranchLocator(-1)",
                BranchLocator2: "/BranchLocator(-1)",
                ForgotPasswordInit: "/ForgotPasswordInit",
                OpenCasaOnline: "/CasaOnline"
            };

            window.addEventListener('hashchange', function (ev) {
                var hasDynamicLink = window.location.hash.replace("#/", "");

                if (hasDynamicLink.indexOf("_") > 0) {
                    hasDynamicLink = hasDynamicLink.split("_")[0];
                }

                if (DynamicLink[hasDynamicLink]) {
                    setTimeout(function() {
                        var iframe = document.getElementsByTagName('iframe')[0];
                        iframe.setAttribute('src', './main.html#'+DynamicLink[hasDynamicLink])
                    }, 1000);
                }

                if (DynamicLinkPreLogin[hasDynamicLink]) {
                    setTimeout(function() {
                        var iframe = document.getElementsByTagName('iframe')[0];
                        iframe.setAttribute('src', './main.html#'+DynamicLinkPreLogin[hasDynamicLink])
                    }, 1000);
                }
            }, false);

            var reloadBot = setInterval(function() {
                var iframe = document.getElementsByTagName('iframe')[0];
                var innerDoc = (iframe.contentDocument)
                    ? iframe.contentDocument
                    : iframe.contentWindow.document;

                var tokenKey = innerDoc.getElementById("tokenKey").value;

                if (tokenKey) {
                    var csrfKey = innerDoc.getElementById("csrfKey").value;
                    var userProfileId = innerDoc.getElementById("userProfileId").value;

                    if (document.getElementById('caipIframe')) {
                        document.getElementById('caipIframe').remove();
                    }

                    if (document.getElementById('platform-script')) {
                        document.getElementById('platform-script').remove();
                    }

                    //S NEB-6918
					var http_request = new XMLHttpRequest();
					var uri = "/cb/odata/ns/authenticationservice/GetAppSettingResults('enable.chatbot')";
					http_request.open("GET", uri, true);
					http_request.setRequestHeader("Accept", "application/json");

					http_request.onreadystatechange  = function() {
						if (http_request.readyState == 4  ) {
							var data = JSON.parse(http_request.responseText);
							console.log(data.d.Value);
							//alert(data.d.Value);
							if(data != null && data.d != null && data.d.Value === 'true'){
								var a = document.createElement("script");
								a.async = !0;
								a.type = "text/javascript";
								a.id = "chatbot-script";
								//NEB7408 --removed
								a.setAttribute("data-userProfileId", userProfileId);
								a.setAttribute("data-env", 'https://neo.vpbank.com.vn');
								a.setAttribute("data-channelType", 'Web');
								a.setAttribute("data-slug", "web-rb-cc247");
                                a.setAttribute("platform", "WEB");
                                a.setAttribute("source", "https://tenant-caip.vpbank.com.vn/")
                                a.src = "https://tenant-caip.vpbank.com.vn/chatbox.platform.js";
								var b = document.getElementsByTagName("script")[0];
								b.parentNode.insertBefore(a, b);
							}
						}
					}

					http_request.send();
					//E NEB-6918

                    clearInterval(reloadBot);
                }
            }, 1000);

            // END #VAC-2 (KHANHLV5)



            //S NEB-6918
            var http_request = new XMLHttpRequest();
            var uri = "/cb/odata/ns/authenticationservice/GetAppSettingResults('enable.chatbot')";
            http_request.open("GET", uri, true);
            http_request.setRequestHeader("Accept", "application/json");

            http_request.onreadystatechange  = function() {
                if (http_request.readyState == 4  ) {
                    var data = JSON.parse(http_request.responseText);
                    console.log(data.d.Value);
                    //alert(data.d.Value);
                    if(data != null && data.d != null && data.d.Value === 'true'){
                        (function() {
                            var a = document.createElement("script");
                            a.async = !0;
                            a.type = "text/javascript";
                            a.id = "chatbot-script";
                            a.setAttribute("data-slug", "web-rb-cc247");
                            a.setAttribute("platform", "WEB");
                            a.setAttribute("source", "https://tenant-caip.vpbank.com.vn/")
                            a.src = "https://tenant-caip.vpbank.com.vn/chatbox.platform.js";
                            var b = document.getElementsByTagName("script")[0];
                            b.parentNode.insertBefore(a, b)
                        })();
                    }
                }
            }

            http_request.send();
            //E NEB-6918
        


            // BEGIN #CCP-478 (KHANHLV5)
            function getUrlParameter(name) {
                name = name.replace(/[\[]/, '\\[').replace(/[\]]/, '\\]');
                var regex = new RegExp('[\\?&]' + name + '=([^&#]*)');
                var results = regex.exec(location.search);
                return results === null ? '' : decodeURIComponent(results[1].replace(/\+/g, ' '));
            }

            var reloadCCP = setInterval(function() {
                try {
                    var iframe = document.getElementsByTagName('iframe')[0];
                    var innerDoc = (iframe.contentDocument)
                        ? iframe.contentDocument
                        : iframe.contentWindow.document;

                    var hashTag = innerDoc.getElementById("serviceChannel");

                    if (hashTag) {
                        var serviceChannel = getUrlParameter('serviceChannel');
                        var trackingId = getUrlParameter('trackingId');
                        var language = getUrlParameter('language');

                        if (serviceChannel && trackingId) {
                            innerDoc.getElementById("serviceChannel").value = serviceChannel;
                            innerDoc.getElementById("trackingId").value = trackingId;
                            innerDoc.getElementById("language").value = language;

                            if (document.getElementById('caipIframe')) {
                                document.getElementById('caipIframe').remove();
                            }

                            if (document.getElementById('platform-script')) {
                                document.getElementById('platform-script').remove();
                            }

                            if (language == 'en') {
                                innerDoc.getElementById("loginComponent---signin--userNameLbl").innerHTML = "<span style='font-size: 15px;'>To experience more services at the Customer Care Portal, please log in with your VPBank NEO account (cskh.vpbank.com.vn)</span>";
                            } else {
                                innerDoc.getElementById("loginComponent---signin--userNameLbl").innerHTML = "<span style='font-size: 15px;'>Đăng nhập VPBank NEO để trải nghiệm thêm dịch vụ tại Website Chăm sóc Khách hàng (cskh.vpbank.com.vn)</span>";
                            }

                            innerDoc.getElementById("loginComponent---signin--bottomIcons").style.display = 'none';
                        }

                        clearInterval(reloadCCP);
                    }
                } catch (e) {

                }
            }, 1000);
            // END #CCP-478 (KHANHLV5)
        

Requests	IP Address	Location	AS Autonomous System
6	142.251.127.94	United States	AS15169Google LLC
4	142.251.13.95	United States	AS19551
4	142.251.14.97	United States	AS15169Google LLC
4	45.223.61.183	United States	AS19551Incapsula Inc
18	4	-	-

Security Scan Report: online.vpbank.com.vn

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Bot Protection Detected

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History