sanxuatbanthinghiem.org - URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned sanxuatbanthinghiem.org and returned a unknown verdict (score -12). The page resolved to 113.190.252.99 on Vietnam Posts and Telecommunications Group in VN. 3 domains and 1 IP were contacted, over 7 HTTP requests. 2 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
http://sanxuatbanthinghiem.org/app/webroot/uploads/files/1293400408.pdf - Domain: sanxuatbanthinghiem.org · IP: 113.190.252.99 · AS45899 · VN
- Server: Microsoft-IIS/10.0
- Page title: Trang không tìm thấy
- HTTP status: 404 · text/html; charset=utf-8
- TLS issuer: C=AT, O=ZeroSSL GmbH, CN=ZeroSSL RSA DV SSL CA 2 · valid to Sep 28 23: · subject CN=sanxuatbanthinghiem.org
- HTTP requests captured: 7
- Scan tier: standard · observed 2026-08-23 17:15:48 UTC
Redirect chain
http://sanxuatbanthinghiem.org/app/webroot/uploads/files/1293400408.pdfhttps://sanxuatbanthinghiem.org/error/index
Malware communicating with this URL (2)
These samples were observed contacting or being served from sanxuatbanthinghiem.org. Each links to its full analysis.
- Phishing - referenced ·
2dcbca63748869acb98cf0d5b539fade· first seen 2026-08-19 - Phishing - referenced ·
5f34422486d211b3bdd3fbf7cf7f192a· first seen 2026-08-15
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Microsoft IIS
- jQuery
Contacted infrastructure
- 113.190.252.99 - AS45899 Vietnam Posts and Telecommunications Group (Viet Nam)
Observed indicators
- sanxuatbanthinghiem.org
- fonts.googleapis.com
- zalo.me
- 113.190.252.99
- https://sanxuatbanthinghiem.org/error/index
- https://sanxuatbanthinghiem.org/Uploads/2099/images/logo.png
- https://sanxuatbanthinghiem.org/style/GetCssHeaderFooterSupport?id=2099&timer=638050521943030000
- https://sanxuatbanthinghiem.org/style/GetCssPageChild?id=2099&categoryid=0&path_module=&type_module=&breadcrumb=&breadcrumbid=0&timer=638050521943030000
- https://sanxuatbanthinghiem.org/style/thankyou.css
- https://sanxuatbanthinghiem.org/light/main.css?v=IvM93VfrXHbBAUToee1cULx5mPTgweihXVysckB2hWI1
- https://sanxuatbanthinghiem.org/LightSkin/js/swiper/swiper-bundle.min.css
- https://sanxuatbanthinghiem.org/lightskin/css/owl.carousel.min.css
- https://sanxuatbanthinghiem.org/lightskin/css/owl.theme.default.min.css
- https://sanxuatbanthinghiem.org/lightskin/css/fontawesome/all.min.css
- https://sanxuatbanthinghiem.org/lightskin/css/jquery-ui.min.css
- https://fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
- https://sanxuatbanthinghiem.org/LightSkin/plugin/img-LC/css/lc_lightbox.min.css
- https://sanxuatbanthinghiem.org/LightSkin/plugin/img-LC/skins/minimal.min.css
- https://sanxuatbanthinghiem.org/css/font/637381808004429260.css
- https://sanxuatbanthinghiem.org/style/GetCssPageUserEdit?categoryid=0&timer=0
Other scans of sanxuatbanthinghiem.org (1)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown
Questions about sanxuatbanthinghiem.org
- Is sanxuatbanthinghiem.org safe?
- The scan of sanxuatbanthinghiem.org on 23 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with sanxuatbanthinghiem.org?
- 2 analysed samples communicate with this URL, including Phishing.
- How was sanxuatbanthinghiem.org checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of sanxuatbanthinghiem.org
Scanned on MalwareAnalyzer by Cyble · Open interactive scan