baocaosudanang24h.com - suspicious URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned baocaosudanang24h.com and returned a suspicious verdict (score 54). The page resolved to 45.124.85.111 on Bach Kim Network solutions Join stock company in VN. The domain was registered 4139 days ago through GMO Internet Group, Inc. d/b/a Onamae.com. 1 domain and 1 IP were contacted. 2 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 54) · Confidence 60%
- Scanned URL:
http://baocaosudanang24h.com/uploads/image/files/zikogoxakixupipuvujugeguz.pdf - Domain: baocaosudanang24h.com · IP: 45.124.85.111 · AS135905 · VN
- Server: nginx
- HTTP status: 200 · application/pdf
- Registrar: GMO Internet Group, Inc. d/b/a Onamae.com · domain age 4139 days · created 2015-04-23
- Scan tier: fast · observed 2026-08-22 08:06:29 UTC
Redirect chain
http://baocaosudanang24h.com/uploads/image/files/zikogoxakixupipuvujugeguz.pdfhttps://baocaosudanang24h.com/uploads/image/files/zikogoxakixupipuvujugeguz.pdf
Malware communicating with this URL (2)
These samples were observed contacting or being served from baocaosudanang24h.com. Each links to its full analysis.
- Phishing - referenced ·
b3fbcdae27b3420f131fc4fbf54e48ef· first seen 2026-08-22 - Phishing - referenced ·
0a682050d7fd15f426a9bd83cfe685e5· first seen 2026-08-22
Antivirus & YARA (1 of 48 engines)
- ClamAV (daily) [av]: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0 (served file)
Why this verdict
- Antivirus/YARA detection in page content: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0
- File download routed to the malware sandbox (zikogoxakixupipuvujugeguz.pdf)
Detected technologies
- Nginx
Contacted infrastructure
- 45.124.85.111 - AS135905 Bach Kim Network solutions Join stock company (Viet Nam)
Files served by this page
- zikogoxakixupipuvujugeguz.pdf ·
f8d3f373cc1280bc8f0f0d9f10363646
Observed indicators
- baocaosudanang24h.com
- 45.124.85.111
- https://baocaosudanang24h.com/uploads/image/files/zikogoxakixupipuvujugeguz.pdf
Questions about baocaosudanang24h.com
- Is baocaosudanang24h.com safe?
- No. MalwareAnalyzer scanned baocaosudanang24h.com on 22 Aug 2026 and returned a suspicious verdict with a score of 54 out of 100. Treat it as hostile until it is re-checked.
- What malware is associated with baocaosudanang24h.com?
- 2 analysed samples communicate with this URL, including Phishing.
- How was baocaosudanang24h.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of baocaosudanang24h.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan