__Secure-ENID

The domain 'aeon.hnbzxc.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'aeon'. Count 6 characters in 'hnbzxc' with zero vowels and 6 consonants. It segments into 3 words: hn, bz, xc. Expect two characters per word on average. 'hn' most strongly signals Vietnamese. Secondary signals appear in Danish and Icelandic. Overall, 'aeon.hnbzxc.com' reads as Vietnamese.

btnK

btnI

sca_esv

source

iflsig

html/ed/f2/edf232e0-9bad-47dd-a5a5-147588a16b76.html.gz

object-src 'none';base-uri 'self';script-src 'nonce-9Ftm_JFmu9adHb-HpAJ-ag' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp

object-src 'none';base-uri 'self';script-src 'nonce-XFcLnhJQ-YMEF-KT9i1qIg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

object-src 'none';base-uri 'self';script-src 'nonce-wjtpjeKHTwOKCIhNSFINQg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other

object-src 'none';base-uri 'self';script-src 'nonce-B_zW0fqk1SDjSRjn7flCHQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other

object-src 'none';base-uri 'self';script-src 'nonce-9qFy8CoAIY5BeETEpvtFNA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other

object-src 'none';base-uri 'self';script-src 'nonce-sV-IKyxD0EhYbBEERjaaQg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other

object-src 'none';base-uri 'self';script-src 'nonce-GXrb4IqWZJ3ceJD6ttGoAw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other

object-src 'none';base-uri 'self';script-src 'nonce-dkCDAKOKbUj6wkISUIZdOQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1

object-src 'none';base-uri 'self';script-src 'nonce-Ko58mVQ-cv0cBpCVskIohA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1

67d3bf0009cf8aa8856fb534790a3b4c42b2caf44563e5d7519816dad7bbccd1

181217aeed0277001fddd9c378229a7702bd14ba5164e593293ffa03f009478b

a7c60d368b2c3c76901d0bfcb825f36c37c39ebc13f311d9b21d8611bae8170a

4d02b652033470c0419271d1f6b87c5840cfff23dc18353ba4d942f12106fba0

2d108fae1f24906e2fc91717664fb6b1c4f9c41d38c927a382c76ef98ee2f3a2

9273329ca6b637323ab8b10276f66f6812b145ab9c540395cf9cfa4c33920f7c

33d12a40eb4dd6cad970fed41078dcccc588fca191a3d24a964fc77e838c3203

7f343f7edd0a1114ffd3ccf7032e83f6adb57bba8b932bbf49d0d3b993fae952

ee6d455e3f55224ddb58fce7c13b8e9449ee3871a70023ed6f07c9c01d0fbfcb

d695c2676cdae1a230d1a5fdaa71a75cb29bb781d9f668ffe8b2e5e6159e1d32

55b398fd9f691aafb79e6fb31b923afdc5facad4ee1c35569c9d9c3f49d4ed13

0801e6ed24b200d774b1c01443c80fe2f751f4b01227050a43471e99e6e43469

56cff8fc758d0d95dc8e356627c9ea2da477099cace8087a80669197b4a6bcc6

88530f6573f4ed71d5fc033aed93b397e29458b12ce1793ace189f0f1d952373

63f14694a39491bcf2e15a93fcc76a9aaec56d073fa8324a98be08c1c7bd3695

referrer

/images/branding/googleg/1x/googleg_standard_color_128dp.png

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)

HNBZXC.COM

(function(){var w=["Google Sans",[400,500,700]];(function(){for(var a=0;a<w.length;a+=2)for(var d=w[a],e=w[a+1],b=0,c=void 0;c=e[b];++b)document.fonts.load(c+" 10pt "+d).catch(function(){})})();})();

(function(){var l='th';var ei='Z5kMafreIeSC9u8PxKHK0A8';var sr=10;(function(a,c,d){a="/gen_204?ei="+ei+"&sol="+a+"&atyp=i&sr="+(c===void 0?100:c);d&&(a+=d);if(navigator.sendBeacon!==void 0)navigator.s

(function(){google.kEXPI='0,3324921,824991,175344,87925,513898,5285365,62118380,139536,101018,479,12880,708,162429,89911,11579,14324,40564,9835,2772,41192,5230,7235,14233,5251,37371,4827,1546,19051,42

(function(){window.google.erd={jsr:1,bv:2320,sd:true,de:true,dpf:'vL2aoKLP7Et8tOHemwKlCj0aNNh4__n8tqthhJm9Sjc'};})();(function(){var sdo=false;var mei=10;var diel=0;
var g=this||self;var k,l=(k=g.mei)

(function(){
var a=this||self;var c=document.querySelector("form");if(c){var d=function(b){b.key!=="Enter"||b.shiftKey||(b.preventDefault(),c.submit&&c.submit())};c.addEventListener("keydown",d);a.sbm

(function(){function d(a,b){if(a.wfpe&&document.prerendering)document.addEventListener("prerenderingchange",()=>{b(a)},{once:!0,passive:!0});else if(a.wfve&&document.hidden){function c(){document.hidd

(function(){var cookieDomain='.google.com';var cookieUpdateConsentUrl='';var sCAS='CAISHAgBEhJnd3NfMjAyNTExMDQtMF9SQzEaAmRlIAEaBgiAyq_IBg';var sCRS='CAESHAgBEhJnd3NfMjAyNTExMDQtMF9SQzEaAmRlIAEaBgiAyq_

;this.gbar_={CONFIG:[[[0,"www.gstatic.com","og.asy.en_US.ZNzr0grymC4.2019.O","de","de","538",null,null,null,null,null,null,"og.asy.68IT_F-NK08.L.W.O","AA2YrTs_Yp9Iul0g6ZLQA9tCbcgF5Wo80g","AA2YrTuB9pNk

const linkEl = document.getElementById('ogb_ss');linkEl.onload = ()=> {linkEl.media = 'all'};linkEl.removeAttribute('id');

HSTS

☠️ Malicious - https://aeon.hnbzxc.com/syOzBZ/#/

Requests	IP Address	Location	AS Autonomous System
14	142.250.186.163	United States	AS15169GOOGLE
2	142.250.186.46	United States	AS15169GOOGLE
2	43.163.211.69	Tokyo, Tokyo, Japan	AS132203Tencent Building, Kejizhongyi Avenue
2	13.32.99.97	New York, New York, United States	AS16509AMAZON-02
2	142.251.140.163	United States	AS15169GOOGLE
2	142.250.181.228	United States	AS15169GOOGLE
2	2a00:1450:4001:82a::2003	Frankfurt am Main, Hesse, Germany	AS15169GOOGLE
2	2a00:1450:4001:828::200e	Frankfurt am Main, Hesse, Germany	AS15169GOOGLE
2	2a00:1450:4001:831::2003	Frankfurt am Main, Hesse, Germany	AS15169GOOGLE
2	2a00:1450:4001:801::2004	Frankfurt am Main, Hesse, Germany	AS15169GOOGLE
38	13	-	-

Security Scan Report: aeon.hnbzxc.com

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History