ScanMalware.com

Security Scan Report: sapo.vn

Redirected to:
https://www.sapo.vn/
Site favicon
Submitted: May 12, 2026, 11:59:30 AMCompleted: May 12, 2026, 12:01:14 PMpubliccompleted
Loading additional data...

Summary

This website contacted 8 IPs in 2 countries across 8 domains to perform 87 HTTP transactions. The main domain is sapo.vn.

Submitted URL: https://sapo.vn

Effective URL: https://www.sapo.vn/Redirected

The Cisco Umbrella rank of the primary domain is #840,920 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Critical IDS alerts reveal malware C2 activity on a site with unknown age and low reputation, making it high‑risk for malware distribution.

Risk Factors
Critical network IDS alerts indicating malware command‑and‑control activity
Large HTTP POST requests suggesting data exfiltration
Low reputation ranking in Cisco Umbrella
Unknown domain age (treated as potentially new)
Inability to fetch page content (possible hidden malicious payloads)
Domain age information unavailable

Details

Page Title

Nền tảng quản lý bán hàng hợp kênh được sử dụng nhiều nhất Việt Nam

Scan Type

public

Language

🇻🇳

VI

(80% confidence)

Category

technology software

(99%)

Domain Information

The domain name 'sapo.vn' uses the Vietnamese country-code top-level domain (.vn) while skipping any subdomain. The core label 'sapo' covers 4 characters containing two vowels alongside two consonants. Splitting it apart reveals 2 words: s, apo. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sapo.vn

Page Load Overview

5.41s
Total Load Time
194
HTTP Requests
21
Domains
14.4 MB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

Language Code:vi
Detection Confidence:80%
Script Type:Unknown
HTML Lang Attribute:vi-VN
Text Length:20,018 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software99% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
99%
finance banking
98%
corporate business
92%
e-commerce shopping
92%
government public service
82%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
26104.20.36.104United States
AS13335Cloudflare, Inc.
24104.19.147.8United States
AS13335Cloudflare, Inc.
24157.240.0.6Frankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
24172.66.0.145United States
AS13335Cloudflare, Inc.
24104.16.80.73United States
AS13335Cloudflare, Inc.
243.174.46.93United States
AS16509Amazon.com, Inc.
24172.66.151.242United States
AS13335Cloudflare, Inc.
24142.251.13.97United States
AS15169Google LLC
1948--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DE74097243F450379056C784D67972297F96A06BF642CA44B7ED1BA88F01CFB8C37A98

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:2YzXhYVaFH2bNGV7sAs6x/X808Wjy0/WJIOqtbQhWBUKdX2eb8tpP+DxNopV/kZo:26FfX8082wqt6KZ2287skFUA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:354208:GiEUZLukBIEChQQGIQQJJEABsLAHYJAaUJFBfWsWSLBBQAAIGQAFEQg9LqgMBAQDRAFw4AASFjxKqEh2CSkAFBtJDEKBQEiI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:040101030007ffff
Perceptual Hash:b21add3a31dd46e0
Difference Hash:3dbdcd9d9d0d000e
Wavelet Hash:050507070387ffff
Color Hash:#98d279

Other Hashes

Crop Resistant:cec69393dbe5e266,3dbdcd9d9d0d000e,82034b272733c382,ad3dbdcddc9ddd0d

Scan History

Scan history not available

Unable to load historical scan data