# PhishDestroy domain threat record: jb.com.vn

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/jb.com.vn/
Machine-readable companion: https://phishdestroy.io/domain/jb.com.vn/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-09-20 10:04:09 UTC
- Last availability or vendor check: 2026-10-23 10:37:43 UTC
- Stored record updated: 2026-10-23 18:21:43 UTC
- VirusTotal detections in the stored snapshot: 7/91
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.96.3
- Registrar in stored WHOIS data: REGISTRAR_NOT_FOUND
- Last stored HTTP status: 200

## Evidence links

- URLScan report: https://urlscan.io/result/01a0be53-e3d5-77dd-99e0-5d1a7aef2c3d/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/jb.com.vn
- Certificate Transparency search: https://crt.sh/?q=%25.jb.com.vn
- Web Archive lookup: https://web.archive.org/web/*/https://jb.com.vn/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
jb.com.vn presents itself as a source of "real" recruitment exam papers, with answers, for three of Vietnam's largest banks: Vietcombank, BIDV and Agribank. PhishDestroy classifies it as an impersonation phishing page aimed at Vietnamese users, especially people preparing for bank job tests. We first flagged it on 2026-09-20, and it was still online and serving content on 2026-10-19.

How the scam works
The page title promises the latest Vietcombank, BIDV and Agribank exam papers with answers, which on its face looks like a test-prep site rather than a fake bank portal. We classify it as impersonation because it borrows these banks' names and authority to win trust. Schemes of this kind typically draw in job applicants with exclusive or leaked material, then ask for personal details, payment for downloads or "registration", or banking logins. Victims can lose money, identity data and access to their bank accounts.

Evidence
On 2026-10-02, 7 of 91 VirusTotal engines flagged the domain: alphaMountain.ai, Chong Lua Dao, Forcepoint ThreatSeeker, Gridinsoft, Seclookup, SOCRadar and VIPRE. Chong Lua Dao, a Vietnamese anti-scam project, is among them, which matters because it tracks local fraud closely. The domain also appears in 5 AlienVault OTX threat pulses. Overall coverage is still modest, so many browsers and filters may not warn visitors yet.

Infrastructure
The site resolves to 188.114.96.3 on Cloudflare's network (Canada), so the real origin server is hidden behind the proxy. It uses a Google Trust Services (WE1) certificate, an automatically issued certificate, so the padlock shows only that the connection is encrypted. It does not show that the site is legitimate or linked to any bank. The Vietnamese .com.vn domain helps it look local and credible to its target audience.

What to do
Do not pay this site for exam materials, fees or account activation. If you already paid, contact your bank about the transaction. If you typed any internet-banking username, password or OTP here, call your bank's official hotline right away, change your credentials and review recent transactions. Get recruitment information only from the banks' official career channels. Defenders should block the domain, report it to Cloudflare and to Chong Lua Dao, and warn staff and customers that bank-brand exam lures are being used for phishing.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a0be53-e3d5-77dd-99e0-5d1a7aef2c3d/
VirusTotal report: https://www.virustotal.com/gui/domain/jb.com.vn
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=jb.com.vn
Archived copy: https://web.archive.org/web/20260616205015/https://jb.com.vn/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-19 10:57:46 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/5Wftzcfc/42f28052af2e.png
  Captured: 2026-09-20 10:20:50 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a0be53-e3d5-77dd-99e0-5d1a7aef2c3d.png
  Captured: 2026-09-20 10:20:50 UTC
  Source report: https://urlscan.io/result/01a0be53-e3d5-77dd-99e0-5d1a7aef2c3d/
- URLScan capture 2: https://urlscan.io/screenshots/019e5b9d-69bf-711e-9c34-a2884213b292.png
  Captured: 2026-09-20 10:04:09 UTC
  Source report: https://urlscan.io/result/01a0be53-e3d5-77dd-99e0-5d1a7aef2c3d/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/0d836f07-451e-47b1-8be6-e182e4f7aeec.png
  Captured: 2026-09-20 10:17:58 UTC
  Source report: https://radar.cloudflare.com/scan/0d836f07-451e-47b1-8be6-e182e4f7aeec
  SHA-256: c6f46e2227b63db40fbb4a42c1156c2e5bace7472d5282eb745a01f3395250ba
- URLScan · 2026-09-20: https://screenshots.phishdestroy.io/us/01a0be53-e340-74b8-9932-4c235f4e00a9.png
  Captured: 2026-09-20 10:19:35 UTC
  Source report: https://urlscan.io/result/01a0be53-e340-74b8-9932-4c235f4e00a9/
  SHA-256: 1c7883242d14625e7a9f39a14311696514494817906bdb39b0ed156ab09d06b1

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-20T22:23:28Z",
        "uuid": "01a0be53-e3d5-77dd-99e0-5d1a7aef2c3d",
        "scanned_at": "2026-09-20T10:19:35Z",
        "final_url": "https://www.jb.com.vn/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://www.jb.com.vn/",
                "from": "http://www.jb.com.vn/",
                "status": 307
            }
        ],
        "ip": "188.114.97.3",
        "domains": [
            "openfpcdn.io",
            "chat.jb.com.vn"
        ],
        "ips": [
            "13.32.99.97",
            "103.163.214.6",
            "188.114.97.3"
        ],
        "asns": [
            "16509",
            "131366",
            "13335"
        ],
        "countries": [
            "US",
            "VN"
        ],
        "link_domains": [
            "www.facebook.com",
            "zalo.me",
            "jb.com.vn",
            "hubdocu.com",
            "web.jb.com.vn",
            "plus.google.com",
            "m.me"
        ],
        "social": [
            "https://www.facebook.com/dethivaonganhang",
            "https://www.facebook.com/thivaonganhang",
            "https://www.facebook.com/groups/jb.vcb",
            "https://www.facebook.com/groups/agritest",
            "https://www.facebook.com/legiang.jb",
            "https://www.facebook.com/groups/jb.bidv",
            "https://www.facebook.com/sharer/sharer.php"
        ],
        "doc_hash": "51a364f099a0d3228d7a50a31fec01ad39776b93763c9aad849ef49545fde18e",
        "script_hashes": [
            "2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8",
            "82f420005cd31fab6b4ab016a07d623e8f5773de90c526777de5ba91e9be3b4d",
            "7dbc4c19f6a3708b87c7d5a5e944531d852bd49b21b9a77595399e2383771591",
            "4e8f4dfa2dcd31aabaa83610fdc922565cf0fc0ffb9b7708385a0f32208d8b74",
            "4038e477d8006038d63b0b3821b5527f96ba37080f71d3c84fec62b80a0319ef",
            "1961be6ef09e68db4f2bddeaf977a4835260100a46a8558f4e75b106e4fcc306",
            "9e0aa0dd3ad69498e4349fdde2628fd5652a3635e92076e8962a2fde695d2be5",
            "0e2f0c2dd65441e57fed3b37ee65f0679d5e3b55d91c0b3dd1d2a8b519af961f",
            "63ac1b4d43ffa4ec3aeb236acb1124ca7ecdf008db04aabf893cd5992cc82cc6",
            "cc8a60dd0091af71f48a339679bf3e28e8e70ea0a24560ec2f0db01d6f91fdd3"
        ],
        "globals": [
            "showNotify",
            "messageNotify",
            "typeNotify",
            "typePopup",
            "refCode",
            "timeMinSeeAds",
            "deviceLog",
            "WebpxChatbot",
            "$",
            "jQuery",
            "mCustomScrollbar",
            "mce-data-1k2v57ugk",
            "tinymce",
            "tinyMCE",
            "toastr",
            "getCommentExam",
            "firstRunExamComment",
            "doAnimations",
            "w",
            "sb2",
            "ct2",
            "copyTextToClipboard",
            "copyLinkToClipboard",
            "validatePaymentBanking",
            "validateLoginRegister",
            "addUserSignatures",
            "updateDeviceLog",
            "disableDevMode",
            "detectDevTools",
            "defaultCopy",
            "defaultWaterMark",
            "plugin",
            "toolbar1",
            "toolbar2",
            "toolbar3",
            "scroll_top",
            "ADS_MANAGER",
            "ADD_MORE_FUNCTION",
            "UPGRADE_052024",
            "com"
        ],
        "cookies": [
            "XSRF-TOKEN",
            "laravel_session"
        ],
        "storage_keys": [
            "ref_code",
            "is_save_ref_code",
            "last_show_modal"
        ],
        "tls": {
            "san": [
                "jb.com.vn",
                "*.jb.com.vn"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "jb.com.vn",
            "protocol": "QUIC",
            "valid_to": "2026-12-11T17:40:16Z",
            "valid_from": "2026-09-12T16:41:42Z"
        },
        "domain_age_days": 3455,
        "apex_age_days": 3455,
        "tls_age_days": 7,
        "tls_valid_days": 90,
        "requests": 92,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": -69,
                "malicious": false
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=UTF-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-20T22:31:18Z",
        "uuid": "0d836f07-451e-47b1-8be6-e182e4f7aeec",
        "scanned_at": "2026-09-20T10:17:58Z",
        "final_url": "https://jb.com.vn/",
        "status": 200,
        "history": [
            {
                "url": "https://jb.com.vn/",
                "status": 200
            }
        ],
        "dom_hash": "d50a770aa72de777924765ca608cbc322e4348670c4ff317c7b3bf5496220589",
        "doc_hash": "a139863f4c6fdf51225c6906a0ce3d54f8afe1027a8d172c8da0b80dc4370c76",
        "domain_risks": [
            "Education",
            "Politics, Advocacy, and Government-Related",
            "Government & Politics"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "chat.jb.com.vn",
                "type": "A",
                "value": "103.163.214.6"
            },
            {
                "name": "jb.com.vn",
                "type": "A",
                "value": "172.67.196.202"
            },
            {
                "name": "jb.com.vn",
                "type": "A",
                "value": "104.21.21.62"
            },
            {
                "name": "jb.com.vn",
                "type": "AAAA",
                "value": "2606:4700:3036::6815:153e"
            },
            {
                "name": "jb.com.vn",
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:c4ca"
            }
        ],
        "dnssec_valid": false,
        "ip": "172.67.196.202"
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T01:55:51Z",
        "analysis_at": "2026-10-20T14:11:30Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 5,
            "suspicious": 0,
            "undetected": 32
        },
        "detections": {
            "VIPRE": "phishing",
            "SOCRadar": "phishing",
            "Gridinsoft": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "popularity": {
            "Alexa": 69182,
            "Statvoo": 69182,
            "Cisco Umbrella": 995738
        },
        "first_seen": "2023-12-28T11:29:24Z",
        "dns": [
            {
                "ttl": 300,
                "type": "TXT",
                "value": "google-site-verification=41hapELcoQppg_MfrnSmUkAwws9__mJlEcuXSouTVtU"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "grace.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "valentin.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:c4ca"
            },
            {
                "ttl": 300,
                "type": "MX",
                "value": "mail.jb.com.vn",
                "priority": 10
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "grace.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3036::6815:153e"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.196.202"
            },
            {
                "ttl": 300,
                "type": "TXT",
                "value": "v=spf1 mx a ip4:103.101.162.165 ~all"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.21.62"
            }
        ],
        "dns_at": "2026-10-20T14:11:53Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "jb.com.vn",
                "*.jb.com.vn"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "bcbde60760d3085213664b7bd8720689",
            "sha256": "db74cf8e8d9114f1d0a9dd5cac2cede85912b027a1d786b95c880b2316ed36b6",
            "subject": "jb.com.vn",
            "valid_to": "2026-12-11T17:40:16Z",
            "valid_from": "2026-09-12T16:41:42Z"
        }
    }
}
```