Security Report: samruby.vn - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d37b380f-eed3-48e6-8521-f3064b86009b Domain and IP registration (RDAP)/api/v1/rdap/d37b380f-eed3-48e6-8521-f3064b86009bHow often this domain was scanned/api/v1/domain/stats/samruby.vn Scan history for this domain/api/v1/domain/history/samruby.vn?limit=15

This website contacted 13 IPs in 3 countries across 8 domains to perform 109 HTTP transactions. The main domain is samruby.vn.

Submitted URL: https://samruby.vn

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised WordPress storefront silently serving ClearFake and Macfinger ClickFix/AMOS stealer chains via EtherHiding, with content-malware Indicators of Compromise and a critical IDS alert. Do not visit.

Risk Factors (5)

Known malicious kit injected into the page (ClearFake + Macfinger ClickFix/AMOS stealer) — CRITICAL severity, roster-anchored

Content-malware Indicator of Compromise on the primary domain (clearfake) corroborated by two independent threat feeds

Blockchain-based EtherHiding payload delivery (Polygon contract resolves next-stage C2 servers)

Obfuscated script with hidden threat-feed hosts (1rpc.io, polygon.drpc.org, rpc-mainnet.matic.quiknode.pro) only visible after decoding

Cross-origin script exfiltration channel to an unranked host (birch-koix-7keeb.pro) via sendBeacon

Domain age information unavailable

Details

Page Title

Trang chủ - Sâm Hàn nhập khẩu

Scan Type

public

Favicon Hash

MMH3: 94070510

MD5: b975b7ff745ae3795bcba337dac57eb7

Domain Name Analysis

Within the Vietnamese country-code top-level domain (.vn), 'samruby.vn' is registered and has no subdomain. Its registrable label 'samruby' stretches across 7 characters containing two vowels alongside five consonants. Splitting it apart reveals two words: sam, ruby. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.37s

Total Load Time

5.8 MB

Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese

Code: vi

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:vi

Text Length:5,351 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking77% confidence

Type: spa

Method: ml+structural

All Detected Categories

finance banking

77%

healthcare medical

58%

e-commerce shopping

34%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	202.92.4.34	Vietnam	AS135905VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
8	142.251.20.95Google · CDN	United States	AS15169Google LLC
8	172.67.142.245Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	138.124.58.227	Paris, Île-de-France, France	AS210644Aeza Group LLC
8	142.251.157.119Google · CDN	United States	AS15169Google LLC
8	142.251.14.94Google · CDN	United States	AS15169Google LLC
8	104.21.95.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	142.251.152.119Google · CDN	United States	AS15169Google LLC
8	172.67.171.128Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	142.251.153.119Google · CDN	United States	AS15169Google LLC
109	13	-	-