# vibuma.com: Vietnamese online construction materials search platform | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/vibuma.com/ Machine-readable companion: https://phishdestroy.io/domain/vibuma.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-11-09 22:15:27 UTC - Selected availability observation: 2026-11-09T22:15:27Z - Stored record updated: 2026-11-09 22:33:03 UTC - VirusTotal detections in the stored snapshot: 7/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 103.7.43.222 - Registrar in stored WHOIS data: Porkbun LLC - Last stored HTTP status: 200 (observed: 2026-11-09T22:15:27Z) - Registration date in stored WHOIS data: 2015-08-18 03:57:40 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1c25f-9023-71e0-8278-bb4e71763dd2/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/vibuma.com - Certificate Transparency search: https://crt.sh/?q=%25.vibuma.com - Web Archive lookup: https://web.archive.org/web/*/https://vibuma.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records vibuma.com as a Vietnamese-language site offering online construction material searches, news, standards and a 3D library for building supplies. The vibuma.com homepage, captured on 2026-11-09, presents a Vietnamese-language construction materials platform. Its hero section reads "TÌM KIẾM VẬT LIỆU XÂY DỰNG TRỰC TUYẾN" (online construction material search) with the tagline "NHANH CHÓNG & DỄ DÀNG" (fast and easy) and a red "JOIN NOW" button. A search bar asks what material, brand or supplier the visitor wants to find, alongside navigation links for general materials, house materials, specialized materials, CSI standards, consulting and construction. The stored VirusTotal domain result reports 7 detections out of 92 engines. VIPRE reported "phishing"; Fortinet reported "phishing". Package revision: 9f07ee7b3baa43a804440d162393dbc22fc479c8463b9605bb1c71f43801e085 Text generated (not scan time): 2026-11-09 23:18:57 Reviewed evidence snapshot: {"domain":"vibuma.com","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"vibuma.com","final_host":"vibuma.com","redirects":[{"to":"https://vibuma.com/","from":"http://vibuma.com/","status":307}],"captured_at":"2026-11-09T22:13:34.456000Z","uuid":"01a1c25f-9023-71e0-8278-bb4e71763dd2","report_url":"https://urlscan.io/result/01a1c25f-9023-71e0-8278-bb4e71763dd2/","sha256":"73db379d0a1ac4055a9760cfa751793a2c630cf014080617db076f51ec33829a","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","virustotal":{"scope":"domain","detections":7,"engines":92,"malicious":7,"suspicious":0,"analysis_date":"2026-11-08","retrieved_date":"2026-11-09","vendor_labels":{"VIPRE":"phishing","Fortinet":"phishing","SOCRadar":"phishing","Gridinsoft":"phishing","SafeToOpen":"phishing","Criminal IP":"phishing","alphaMountain.ai":"phishing"},"flagging_vendors":["VIPRE","Fortinet","SOCRadar","Gridinsoft","SafeToOpen","Criminal IP","alphaMountain.ai"]},"virustotal_public_summary":"The stored VirusTotal domain result reports 7 detections out of 92 engines. VIPRE reported \"phishing\"; Fortinet reported \"phishing\".","page_paragraph_target_characters":546} Source facts (timestamps as stored): {"record_id":1887104,"first_recorded_at":"2026-11-09 23:15:27","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":7,"denominator":92,"malicious":7,"suspicious":0,"vendors":{"VIPRE":"phishing","Fortinet":"phishing","SOCRadar":"phishing","Gridinsoft":"phishing","SafeToOpen":"phishing","Criminal IP":"phishing","alphaMountain.ai":"phishing"},"observed_at":"2026-11-08T14:34:33Z","checked_at":null,"fetched_at":"2026-11-09T22:16:31Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":7,"denominator":92,"malicious":null,"suspicious":null,"vendors":["Criminal IP","alphaMountain.ai","Fortinet","Gridinsoft","SafeToOpen","SOCRadar","VIPRE"],"observed_at":"2026-11-08 14:34:33","checked_at":"2026-11-09 23:16:31","fetched_at":"2026-11-09 22:16:31","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"VIPRE":"phishing","Fortinet":"phishing","SOCRadar":"phishing","Gridinsoft":"phishing","SafeToOpen":"phishing","Criminal IP":"phishing","alphaMountain.ai":"phishing"},"vendor_names":["VIPRE","Fortinet","SOCRadar","Gridinsoft","SafeToOpen","Criminal IP","alphaMountain.ai"],"stats":{"timeout":0,"harmless":55,"malicious":7,"suspicious":0,"undetected":30}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-09 23:16:33"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":null},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1887104,"scope":"checked_url","observed_at":"2026-11-09T22:15:27Z","http_status":200,"http_observed_at":"2026-11-09T22:15:27Z","stored_http_code":200,"stored_http_observed_at":"2026-11-09T22:15:27Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - URLScan · 2026-11-09: https://screenshots.phishdestroy.io/us/01a1c25f-9023-71e0-8278-bb4e71763dd2.png Captured: 2026-11-09 22:13:34 UTC Source report: https://urlscan.io/result/01a1c25f-9023-71e0-8278-bb4e71763dd2/ SHA-256: 73db379d0a1ac4055a9760cfa751793a2c630cf014080617db076f51ec33829a - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/b15afbd4-d474-4166-ac48-7c2b229d814a.png Captured: 2026-11-09 22:17:29 UTC Source report: https://radar.cloudflare.com/scan/b15afbd4-d474-4166-ac48-7c2b229d814a SHA-256: 7a3d4e3c75e8f6c7aa6603871b49bef7c98dce5487d29935e1052c7a34b031eb ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-09T22:18:02Z", "uuid": "01a1c25f-9023-71e0-8278-bb4e71763dd2", "scanned_at": "2026-11-09T22:13:34Z", "final_url": "https://vibuma.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://vibuma.com/", "from": "http://vibuma.com/", "status": 307 } ], "ip": "103.7.43.222", "ptr": "vps43222.superdata.vn", "domains": [ "fonts.gstatic.com", "www.googletagmanager.com", "www.google-analytics.com", "fonts.googleapis.com" ], "ips": [ "216.239.32.178", "142.250.195.131", "172.217.25.200", "142.250.195.138", "103.7.43.222" ], "asns": [ "15169", "45544" ], "countries": [ "US", "VN" ], "link_domains": [ "online.gov.vn", "www.facebook.com", "plus.google.com", "www.linkedin.com", "maps.google.com", "icreate.vn" ], "social": [ "https://www.facebook.com/Vibuma-230001090842247" ], "doc_hash": "e8dbf0f4226c63b57dc8e76275153379d3b2ee623d5b0d6ccab6e4bf830a2729", "script_hashes": [ "2ecd295d295bec062cedebe177e54b9d6b19fc0a841dc5c178c654c9ccff09c0", "fbf432b5b2d82b5afa000a663ebc21817c3bbb3e2ef47d44eb973ce575b21d1a", "a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66", "7e26ca2fd58d9878a3754800828a0b4a1af34f747c19c7d48ff1add55b1759c3", "56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4", "a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d", "2a5d6f434ca2a1ee89ea27668f9e6a18d8283ab28e4c987859815d9a2567bd9c", "8fedfd996f4a83fcdb344374d0c4035c2e32322a46c2abed1a5439bf7d0f70c6", "48ac54325cafed841718449273942ed634e6d50739731f169d029bda768e7b18", "bea7138bd392995459adbbe84d0d8a85bc05c14140477f4ccabedb490cd4648c" ], "globals": [ "site_url", "session_id", "check_login", "$", "jQuery", "Popper", "html5", "Modernizr", "yepnope", "bootstrap", "jQuery111208920558411144661", "owl_ads_checkin", "isMobile", "is_mobile", "getdomain", "validateFreeEmail", "is_number", "hide_modal_singin", "hide_modal_singup", "show_modal_singin", "show_modal_singup", "confirm_del", "$_slidesPerView", "_owl_brand_popup_default", "_owl_brand_popup_frate", "show_modal", "hide_modal", "show_modal_branddes", "hide_modal_branddes", "hide_modal_ranges", "add_wishlist", "frate_list_page", "supbrand_item_process", "brand_popup_owl_run", "update_brandfeeback_rate", "gtag", "dataLayer", "google_tag_data", "google_tag_manager", "onYouTubeIframeAPIReady" ], "cookies": [ "PHPSESSID", "_ga_V0QC7XYCQX", "_ga" ], "storage_keys": [ "modernizr" ], "tls": { "san": [ "vibuma.com", "www.vibuma.com" ], "cipher": "AES_128_GCM", "issuer": "YR2", "subject": "www.vibuma.com", "protocol": "TLS 1.3", "valid_to": "2026-12-20T00:12:53Z", "valid_from": "2026-09-21T00:12:54Z" }, "domain_age_days": 2839, "apex_age_days": 2839, "tls_age_days": 49, "tls_valid_days": 89, "requests": 66, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-2aab354" ], "score": 0, "malicious": false }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "Apache", "content-type": "text/html; charset=UTF-8" } }, "cf": { "v": 1, "fetched_at": "2026-11-09T22:18:04Z", "uuid": "b15afbd4-d474-4166-ac48-7c2b229d814a", "scanned_at": "2026-11-09T22:17:29Z", "final_url": "https://vibuma.com/", "status": 200, "history": [ { "url": "https://vibuma.com/", "status": 200 } ], "dom_hash": "46b4a750304528bdc1c7f912194807dce7032a4a187fe96e9791c6b24d6cbdef", "doc_hash": "cebc3fe71c9ea3c3426145e2e1fde35469b647e705afa9c2507f73b16cdf5416", "domain_risks": [ "Business", "Business & Economy" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "vibuma.com", "type": "A", "value": "103.7.43.222" } ], "dnssec_valid": true, "ip": "127.0.1.15", "whois": { "registrar": "Porkbun LLC", "created": "2015-08-18T05:57:40Z", "updated": "2026-10-27T08:41:56Z", "expires": "2028-08-18T05:57:40Z", "nameservers": [ "curitiba.ns.porkbun.com", "fortaleza.ns.porkbun.com", "maceio.ns.porkbun.com", "salvador.ns.porkbun.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-09T22:16:31Z", "analysis_at": "2026-11-08T14:34:33Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 7, "suspicious": 0, "undetected": 30 }, "detections": { "VIPRE": "phishing", "Fortinet": "phishing", "SOCRadar": "phishing", "Gridinsoft": "phishing", "SafeToOpen": "phishing", "Criminal IP": "phishing", "alphaMountain.ai": "phishing" }, "reputation": 0, "popularity": { "Alexa": 278682, "Statvoo": 278682, "Majestic": 992900, "Cisco Umbrella": 741322, "Cloudflare Radar": 1000000 }, "registrar": "Porkbun LLC", "created": "2015-08-18T05:57:40Z", "expires": "2028-08-18T05:57:40Z", "updated": "2026-10-16T08:31:31Z", "first_seen": "2023-09-28T20:07:16Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "curitiba.ns.porkbun.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "curitiba.ns.porkbun.com" }, { "ttl": 600, "type": "TXT", "value": "v=spf1 ip4:5.223.86.232 ip6:2a01:4ff:2f0:22d2::1 -all" }, { "ttl": 21600, "type": "NS", "value": "salvador.ns.porkbun.com" }, { "ttl": 600, "type": "MX", "value": "mail.vibuma.com", "priority": 10 }, { "ttl": 600, "type": "A", "value": "103.7.43.222" }, { "ttl": 21600, "type": "NS", "value": "fortaleza.ns.porkbun.com" }, { "ttl": 21600, "type": "NS", "value": "maceio.ns.porkbun.com" }, { "ttl": 600, "type": "TXT", "value": "MS=ms23568988" } ], "dns_at": "2026-11-08T14:36:08Z", "jarm": "15d3fd16d29d29d00042d43d0000001ae0802418786940cae38f1d9eed5b9b", "cert": { "san": [ "vibuma.com", "www.vibuma.com" ], "issuer": "Let's Encrypt / YR2", "serial": "622acdbd97f9536323adc92d84c7c51642a", "sha256": "700d2dfefef37b90e1ee7f9771737d93f424337dbfbc5ff59170d49e0081ecc9", "subject": "www.vibuma.com", "valid_to": "2026-12-20T00:12:53Z", "valid_from": "2026-09-21T00:12:54Z" }, "whois": { "registrar": "Porkbun LLC", "registrar_iana_id": "1861", "registrar_url": "http://porkbun.com", "created": "2015-08-18T05:57:40Z", "updated": "2026-10-16T08:31:31Z", "expires": "2028-08-18T05:57:40Z", "status": [ "clientDeleteProhibited", "clientTransferProhibited" ], "nameservers": [ "curitiba.ns.porkbun.com", "fortaleza.ns.porkbun.com", "maceio.ns.porkbun.com", "salvador.ns.porkbun.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "delete prohibited", "transfer prohibited" ], "events": { "expiration": "2028-08-18T05:57:40Z", "last changed": "2026-10-16T06:39:07Z", "registration": "2015-08-18T05:57:40Z", "registrar expiration": "2028-08-18T05:57:40Z", "last update of RDAP database": "2026-10-16T06:39:07Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-11-09T22:18:26Z", "mail_config": { "mx": [ "mail.vibuma.com" ], "spf": "v=spf1 ip4:5.223.86.232 ip6:2a01:4ff:2f0:22d2::1 -all", "dkim": [ "dkim" ], "dmarc": true, "mta_sts": "testing", "dkim_bits": 2048, "spf_lookups": 0 }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-11-09T22:16:30Z", "first": "2016-04-28T02:41:26Z", "changes": 205, "days_archived": 208, "scans_per_day": 0.05, "avg_page_bytes": -37241675 }, "robots_txt": { "agents": [ "*" ], "present": true }, "sitemap": { "present": true, "url_count": 500 }, "social_tags": { "ogUrl": "https://vibuma.com/", "title": "Thư Viện Vật Liệu Xây Dựng Trực Tuyến Việt Nam", "robots": "noodp,index,follow", "ogImage": "https://vibuma.com/uploads/slide/f68d96d413c0decc555c2937160497df.jpg", "ogTitle": "Thư Viện Vật Liệu Xây Dựng Trực Tuyến Việt Nam", "keywords": "vật liệu xây dựng, vật liệu xây dựng Việt Nam, thư viện vật liệu trực tuyến, thư viện vật liệu", "description": "Vibuma là website cung cấp thông tin về vật liệu xây dựng miễn phí và toàn diện nhất tại Việt Nam, mang đến những thông tin cần thiết về các nhà cung cấp và sản phẩm vật liệu xây dựng.", "canonicalUrl": "https://vibuma.com/", "ogDescription": "Vibuma là website cung cấp thông tin về vật liệu xây dựng miễn phí và toàn diện nhất tại Việt Nam, mang đến những thông tin cần thiết về các nhà cung cấp và sản phẩm vật liệu xây dựng." }, "trackers": { "requests": 52, "trackers": [ { "name": "Google Tag", "company": "Google", "country": "US", "category": "Advertising", "requests": 1 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://www.googletagmanager.com/gtag/js" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 19, "tls": 186, "wait": 252, "connect": 183, "download": 366 }, "response_ms": 1006 }, "tls_connection": { "alpn": "http/1.1", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 25, 53, 80, 110, 143, 443, 587, 993, 995 ] }, "carbon": { "bytes": 92149, "co2_grams": 0.0034, "cleaner_than": 24 }, "dns_server": { "ns": [ { "ip": "162.159.11.180", "host": "maceio.ns.porkbun.com" }, { "ip": "162.159.10.150", "host": "salvador.ns.porkbun.com" }, { "ip": "173.245.58.37", "host": "curitiba.ns.porkbun.com" }, { "ip": "162.159.8.140", "host": "fortaleza.ns.porkbun.com" } ], "zone": "vibuma.com" }, "cookies": { "cookies": [ { "name": "PHPSESSID", "session": true } ] }, "location": { "ip": "103.7.43.222", "asn": "45544", "org": "Vietnam Internet Network Information Center", "city": "Quận Ba", "country": "VN" }, "ssl": { "issuer": "Let's Encrypt / YR2", "subject": "www.vibuma.com" }, "dns": { "A": [ "103.7.43.222" ], "MX": [ "{\"exchange\": \"mail.vibuma.com\", \"priority\": 10}" ], "NS": [ "fortaleza.ns.porkbun.com", "salvador.ns.porkbun.com", "maceio.ns.porkbun.com", "curitiba.ns.porkbun.com" ], "SOA": "{\"nsname\": \"curitiba.ns.porkbun.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2419152916, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "TXT": [ "MS=ms23568988", "v=spf1 ip4:5.223.86.232 ip6:2a01:4ff:2f0:22d2::1 -all" ] }, "dnssec": { "ds": true, "rrsig": true, "dnskey": true }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "103.7.43.222", "family": 4 }, "redirects": { "chain": [ "https://vibuma.com" ] }, "rank": { "domain": "vibuma.com" }, "subdomains": { "count": 7, "subdomains": [ "autoconfig.vibuma.com", "autodiscover.vibuma.com", "e.vibuma.com", "link.vibuma.com", "mail.vibuma.com", "mta-sts.vibuma.com", "www.vibuma.com" ] }, "tech_stack": { "technologies": [ "PHP", "Bootstrap", "Apache HTTP Server", "OWL Carousel", "Modernizr", "jQuery Migrate", "jQuery", "Google Analytics", "Google Font API", "Popper", "Open Graph" ] }, "linked_pages": { "external": [ "http://online.gov.vn/WebsiteDisplay.aspx", "https://www.facebook.com/Vibuma-230001090842247/", "https://plus.google.com/110575356545122688845/about", "https://www.linkedin.com/company/vibuma", "http://maps.google.com/maps", "http://icreate.vn/" ], "external_count": 6, "internal_count": 97 }, "whois": { "registrar": "Porkbun LLC", "created": "2015-08-18T05:57:40Z", "updated": "2026-10-27T08:41:56Z", "expires": "2028-08-18T05:57:40Z", "status": [ "clientDeleteProhibited https://icann.org/epp", "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "curitiba.ns.porkbun.com", "fortaleza.ns.porkbun.com", "maceio.ns.porkbun.com", "salvador.ns.porkbun.com" ] }, "headers": { "headers": { "server": "Apache", "content-type": "text/html; charset=UTF-8" } } } } ``` Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/us/01a1c25f-9023-71e0-8278-bb4e71763dd2.png","source":"URLScan","report_url":"https://urlscan.io/result/01a1c25f-9023-71e0-8278-bb4e71763dd2/","captured_at":"2026-11-09T22:13:34Z","sha256":"73db379d0a1ac4055a9760cfa751793a2c630cf014080617db076f51ec33829a","model_image_sha256":"949778491c203d04ea4ebf2be8e8b51d412035e6cfa97aeb108c972e36db23ec","available":true,"content_status":null} ## Complete dated records Availability observations: https://phishdestroy.io/domain/vibuma.com/records.json?source=availability&format=json Source observation history: https://phishdestroy.io/domain/vibuma.com/records.json?source=detections&format=json PhishStats records: https://phishdestroy.io/domain/vibuma.com/records.json?source=phishstats&format=json Sent report records: https://phishdestroy.io/domain/vibuma.com/records.json?source=sent_reports&format=json Report history: https://phishdestroy.io/domain/vibuma.com/records.json?source=report_history&format=json Repeat report records: https://phishdestroy.io/domain/vibuma.com/records.json?source=rereports&format=json Follow-up records: https://phishdestroy.io/domain/vibuma.com/records.json?source=followups&format=json Content observations: https://phishdestroy.io/domain/vibuma.com/records.json?source=content&format=json ## Dated availability observation Latest stored reachability observation ```json { "state": "alive", "label_key": "availability.active", "detail_key": "detail.latest_reachability", "params": [], "source": "current_http_probe", "record_id": 1887104, "scope": "checked_url", "observed_at": "2026-11-09T22:15:27Z", "http_status": 200, "http_observed_at": "2026-11-09T22:15:27Z", "stored_http_code": 200, "stored_http_observed_at": "2026-11-09T22:15:27Z", "legacy_site_status": "alive", "supports_outcome_badge": false, "content_classification": "unknown", "content_classification_at": null, "registration_state": "unknown", "policy": "20261102-dated-availability-v2" } ```