The scan of songod.vn on 22 Aug 2026 reached no verdict either way (score 18). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with songod.vn?

3 analysed samples communicate with this URL, including Phishing.

How was songod.vn checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

songod.vn - URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned songod.vn and returned a unknown verdict (score 18), categorised as credential-harvest. The page resolved to 222.255.167.54 on VDC IPADMIN GROUP in VN. 6 domains and 1 IP were contacted, over 17 HTTP requests. 3 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 18) · Confidence 21%
Scanned URL: https://songod.vn/uploads/image/files/kowilojarajimenawawan.pdf
Domain: songod.vn · IP: 222.255.167.54 · AS45899 · VN
Server: nginx
Page title: Không tìm thấy trang này – Songod
HTTP status: 404 · text/html; charset=UTF-8
HTTP requests captured: 17
Scan tier: fast · observed 2026-08-22 10:21:50 UTC

Malware communicating with this URL (3)

These samples were observed contacting or being served from songod.vn. Each links to its full analysis.

Phishing - referenced · 92981ae95ced31f44c2ee3f897285bf2 · first seen 2026-08-22
Phishing - referenced · 0443996dd9c57dee16c66436f1e5e288 · first seen 2026-08-22
Phishing - referenced · e3f6fc9c389612f0d16ff4ad03dfe753 · first seen 2026-08-12

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form

Detected technologies

Nginx
PHP
WordPress
jQuery

Contacted infrastructure

222.255.167.54 - AS45899 VDC IPADMIN GROUP (VN)

Observed indicators

songod.vn
gmpg.org
cdn.jsdelivr.net
connect.facebook.net
www.facebook.com
zalo.me
222.255.167.54
https://songod.vn/uploads/image/files/kowilojarajimenawawan.pdf
http://gmpg.org/xfn/11
https://songod.vn/xmlrpc.php
https://cdn.jsdelivr.net/
https://songod.vn/wp-content/themes/flatsome/assets/js/flatsome.js?ver=f2c57559524d9813afd4
https://songod.vn/wp-content/themes/flatsome/assets/js/chunk.slider.js?ver=3.17.1.1
https://songod.vn/wp-content/themes/flatsome/assets/js/chunk.popups.js?ver=3.17.1.1
https://songod.vn/wp-content/themes/flatsome/assets/js/chunk.tooltips.js?ver=3.17.1.1
https://songod.vn/wp-content/themes/flatsome/assets/js/woocommerce.js?ver=1a392523165907adee6a
https://songod.vn/feed/
https://songod.vn/comments/feed/
https://songod.vn/wp-content/plugins/button-contact-vr/css/style.css?ver=7.1
https://songod.vn/wp-content/themes/flatsome/inc/integrations/wc-yith-wishlist/wishlist.css?ver=3.10.2

Questions about songod.vn

Is songod.vn safe?: The scan of songod.vn on 22 Aug 2026 reached no verdict either way (score 18). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with songod.vn?: 3 analysed samples communicate with this URL, including Phishing.
How was songod.vn checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of songod.vn

Scanned on MalwareAnalyzer by Cyble · Open interactive scan