Report Overview
Visitedpublic
2026-05-16 01:22:30
Tags
Submit Tags
URL
mail.dambilua.id.vn/MXH1.zip
Finishing URL
about:privatebrowsing
IP / ASN
210.211.125.205
#38731 CHT Compamy Ltd
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Host Summary

HostRankRegisteredFirst SeenLast Seen
mail.dambilua.id.vn
unknownunknown2026-05-162026-05-16

Related reports

Threat Detection Systems
Detection SystemIndicatorVerdictAlert
OpenDNSmail.dambilua.id.vnphishing
Phishing Block
Hagezi Threat Feedmail.dambilua.id.vnmalicious
Sinkholed
DNS4EUmail.dambilua.id.vnmalicious
Sinkholed

File detected

URL
mail.dambilua.id.vn/MXH1.zip
IP / ASN
210.211.125.205
#38731 CHT Compamy Ltd
File Overview
File TypeZip archive data, at least v1.0 to extract, compression method=store
Size188 kB (188026 bytes)
MD5aa91c5f4a889f036fefe422129bccf4a
SHA1d1e173583b13a0fab86a02ee2767f1efd388d515
Archive (12)
FilenameMD5File type
style.css23922857fd16b062460185b0b09710a0Unicode text, UTF-8 text, with CRLF line terminators
fb_logo.svgebd8798bc32c86494851a07770e04e63SVG Scalable Vector Graphics image
index.html2041c2861b3a2a29fc08f67fc5d03d74HTML document, Unicode text, UTF-8 text
login.php279558a1b485c77c2d3d97b5f5e1bd13PHP script, Unicode text, UTF-8 text
admin.php5de5d681c265138c947ddac4a2f1c54fPHP script, Unicode text, UTF-8 text
ADMIN_README.md5f37b8e60dbd82ad6b9a7539d0606aeaUnicode text, UTF-8 text
cleanup.php8e680876cea1a9342d6173a8fa2d85ddPHP script, Unicode text, UTF-8 text
device_parser.php70a3d236fbfa389b50b71f9e7ee8382cPHP script, Unicode text, UTF-8 text, with CRLF line terminators
fbload.pngd12bfde0ef5f8a0d2c2b9386768ca25ePNG image data, 828 x 1792, 16-bit/color RGBA, non-interlaced
LUONG_SU_DUNG.md9e992d6ad51037bf056eacc75cea788bUnicode text, UTF-8 text, with CRLF line terminators
mxh.html5600a463e41e99e37845e58267a47ee5HTML document, Unicode text, UTF-8 text
upload.phpc550e51d8e37bd0aeee02197c03e07bbPHP script, Unicode text, UTF-8 text

Detections

AnalyzerVerdictAlert
VirusTotalmalicious
VirusTotal - Scan result 16/64

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize