VIRUSSIGN
Malicious HighDOMAIN
Quota 16
First seen
Last seen
CONFIDENCE100%VirusSign analysis
FAMILYNot identifiedphishing
RELATED INDICATORS11Connections in this report
ANALYSISMaliciousFresh

Indicator overview

INDICATOR PROFILE

Engine detections are elevated in this report. Review the reported confidence, classification and relationships alongside them.

Domain
chaomoinguoi.duckdns.org
TLD
org
Root domain
duckdns.org
Subdomain
chaomoinguoi
Resolved geo
Ho Chi Minh City, Ho Chi Minh, Vietnam
Resolved IP
123.23.241.181
Country
Vietnam
DGA risk
medium
DGA score
59.0
Domain age days
4960.0

Connected context

Key findings

OBSERVED EVIDENCE
Analysis takeaway

Elevated engine detections. Related indicators in this report: 11. Review the supporting evidence before taking action.

Detection signal

Malicious. Engine detections are elevated at 33%.

Confidence signal

VirusSign reports 100% confidence. Review this alongside engine detections and relationship evidence.

Analysis signals

OBSERVED
Engine detections33%
VirusSign confidence100%
Relationship context11 visible
Threat classificationphishing

Explore further connections

Connect an API key with relationship access to explore further connections. Additional queries use credits.

Connect API keyAPI trial

Structured report export

Connect an eligible API key to export the report.

Connect API keyAPI trial
EXPORT & SHARE

Put this intelligence to work

Export this report or share its findings with your team.

Export & share

Website JSON and CSV exports include this report’s data. The website STIX export includes up to 50 indicators and their reported verdicts.

Use intelligence in your workflow

The website shows selected findings. Evaluate API access for your tools and security workflows.

API trial
Help improve this report Report false positive Report incorrect data

Files are hashed locally in your browser and never uploaded. Only the SHA-256 is sent for lookup. Standard query quota applies.