{"id":22449,"date":"2026-08-05T08:01:49","date_gmt":"2026-08-05T08:01:49","guid":{"rendered":"https:\/\/any.run\/cybersecurity-blog\/?p=22449"},"modified":"2026-08-05T08:01:49","modified_gmt":"2026-08-05T08:01:49","slug":"chongluadao-success-story","status":"publish","type":"post","link":"https:\/\/any.run\/cybersecurity-blog\/chongluadao-success-story\/","title":{"rendered":"Safeguarding 200M Users: How ChongLuaDao Scales Threat Validation with ANY.RUN"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/chongluadao.vn\/en\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>ChongLuaDao<\/strong><\/a> protects over 200 million users from cybercrime, having detected <strong>more than 1.4 million malicious websites<\/strong> since 2020. Rapid processing of community reports is essential to their operations.  <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In our recent conversation, ChongLuaDao co-founder <strong>Hieu Ngo told us how <\/strong><a href=\"https:\/\/any.run\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=ChongLuaDao-success-story&amp;utm_term=050826&amp;utm_content=linktolanding\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>ANY.RUN<\/strong><\/a><strong> plays an integral role<\/strong> in the project&#8217;s infrastructure, <strong>helping it power thousands of safety checks<\/strong> to stop cyber threats before they reach potential victims. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">A Community-Driven Mission: Small Team, Global Impact <\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"684\" src=\"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/08\/695354483_1584128597053587_7444900592870612304_n-1024x684.jpg\" alt=\"\" class=\"wp-image-22459\" srcset=\"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/08\/695354483_1584128597053587_7444900592870612304_n-1024x684.jpg 1024w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/08\/695354483_1584128597053587_7444900592870612304_n-300x200.jpg 300w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/08\/695354483_1584128597053587_7444900592870612304_n-768x513.jpg 768w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/08\/695354483_1584128597053587_7444900592870612304_n-1536x1025.jpg 1536w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/08\/695354483_1584128597053587_7444900592870612304_n-370x247.jpg 370w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/08\/695354483_1584128597053587_7444900592870612304_n-270x180.jpg 270w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/08\/695354483_1584128597053587_7444900592870612304_n-740x494.jpg 740w, https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/08\/695354483_1584128597053587_7444900592870612304_n.jpg 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">ChongLuaDao team. Photo: Chongluadao.vn Facebook page<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Based in <strong>Ho Chi Minh City, Vietnam<\/strong>, ChongLuaDao is a <strong>non-profit, community-driven cybersecurity initiative<\/strong> with a singular mission: to make online safety free, practical, and accessible for everyone. <\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">&#8220;Our mission is to make online safety free, practical, and accessible by helping people verify suspicious websites, report scams, and block dangerous links before victims are harmed.&#8221;<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">The organization operates with a lean but highly efficient structure: <\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>A Small Core Team:<\/strong> A specialized group of security analysts, engineers, and investigators who manage the project\u2019s strategy and technical infrastructure. <\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Global Volunteer Power:<\/strong> A massive community of <strong>more than 200 volunteer moderators and cybersecurity experts<\/strong> who assist in reviewing and validating user-submitted scam reports. <\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Enterprise-Scale Ecosystem:<\/strong> Despite its non-profit status, the project\u2019s impact is massive, <strong>serving over one million daily queries via its threat intelligence API<\/strong> and maintaining strategic partnerships with global leaders like <strong>APWG and PhishTank<\/strong>. <\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Through this unique blend of human expertise and advanced technology, ChongLuaDao has turned a local initiative into a <strong>critical node of the global threat intelligence network<\/strong>. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The Challenge: Scaling Analysis for the Constantly Changing Scam Infrastructure <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For ChongLuaDao, the primary operational bottleneck was <strong>speed<\/strong>. The landscape of modern cybercrime in Vietnam is dominated by <strong>short-lived infrastructure<\/strong>: scam domains, phishing pages, and malicious APKs often appear and disappear within hours. Relying on <strong>manual review alone became impossible<\/strong> as the volume of daily suspicious submissions began to outpace the team\u2019s capacity. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This massive influx of data created <a href=\"https:\/\/any.run\/cybersecurity-blog\/cfo-cyber-risk-playbook\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>heavy pressure on the analyst team<\/strong><\/a>. Without the ability to perform fast dynamic analysis, validating a single suspicious file or URL could take too long. These delays had real-world consequences, leading to <a href=\"https:\/\/any.run\/cybersecurity-blog\/efficient-soc-for-fast-response\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>slower response times in blocking threats<\/strong><\/a>, warning potential victims, and sharing intelligence with global partners. <\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">&#8220;Scam domains, phishing pages, fake investment sites, malicious APKs, and credential theft pages appear and disappear very quickly, so manual review alone could not keep up with the volume or urgency&#8221;<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">The challenge was further intensified by the organization\u2019s status as a <strong>non-profit with limited staff, budget, and time<\/strong>. To protect millions of users effectively, ChongLuaDao needed an <strong>enterprise-grade solution<\/strong> that could drastically <strong>reduce analyst workload<\/strong> and provide the high-fidelity evidence required to make confident, life-saving blocking decisions in real time. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">ANY.RUN Integration: Moving Beyond Static Analysis to Unmask &#8220;Smart&#8221; Phishing in Real Time <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">ChongLuaDao integrated ANY.RUN to overcome the technical limitations of static analysis when facing sophisticated, evasive threats. The team selected the solution based on its ability to provide <strong>real-time interaction within secure cloud-based VMs<\/strong>, a capability essential for analyzing modern scam infrastructure. <\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">&#8220;From a leadership perspective, <strong>ANY.RUN helps ChongLuaDao scale our mission<\/strong>.&#8221;<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/any.run\/features\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=ChongLuaDao-success-story&amp;utm_term=050826&amp;utm_content=linktosandboxlanding\" target=\"_blank\" rel=\"noreferrer noopener\">ANY.RUN\u2019s Interactive Sandbox<\/a> delivered instant value to ChongLuaDao, offering several operational advantages: <\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Detection of Evasive and Multi-Stage Threats:<\/strong> Many phishing campaigns are multi-stage and depend on specific user interactions like clicking. ANY.RUN\u2019s interactive nature allows analysts to <strong>simulate user behavior<\/strong>, exposing malicious flows that remain dormant and undetected in passive sandboxes. <\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>High-Fidelity Verdicts and Reduced False Alarms:<\/strong> By providing full visibility into the <strong>entire behavior chain<\/strong> rather than relying on static indicators, the sandbox improves analyst confidence. This clarity is critical for distinguishing sophisticated phishing kits from legitimate but abused infrastructure, ensuring that blocking decisions are accurate. <\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Operational Efficiency for Resource-Constrained Teams:<\/strong> As a non-profit managing 200 million protected users with a lean staff, ChongLuaDao requires solutions that reduce manual workload. ANY.RUN acts as a force multiplier, transforming what used to be <strong>hours of manual forensic checking into minutes of interactive validation<\/strong>. <\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">By prioritizing <strong>interactive visibility<\/strong>, ChongLuaDao has moved from simply flagging suspicious links to confirming and neutralizing complex threats in a single workflow. <\/p>\n\n\n\n<!-- Regular Banner START -->\n<div class=\"regular-banner\">\n<!-- Text Content -->\n<p class=\"regular-banner__text\">\n<span class=\"highlight\">Close visibility gaps that delay investigations and increase exposure.<\/span><br>\nGive your SOC the evidence to act faster.\n<\/p>\n<!-- CTA Link -->\n<a class=\"regular-banner__link\" id=\"article-banner-regular\" href=\"https:\/\/any.run\/enterprise\/?utm_source=anyrunblog&#038;utm_medium=article&#038;utm_campaign=ChongLuaDao-success-story&#038;utm_term=050826&#038;utm_content=linktoenterpriseform\/#contact-sales\" rel=\"noopener\" target=\"_blank\">\nReduce Security Exposure<\/a>\n<\/div>\n<!-- Regular Banner END -->\n<!-- Regular Banner Styles START -->\n\n<style>\n.regular-banner {\ndisplay: flex;\ntext-align: center;\nflex-direction: column;\nalign-items: center;\ngap: 1.5rem;\nwidth: 100%;\npadding: 2rem;\nmargin: 1.5rem 0;\nborder-radius: 0.5rem;\nfont-family: 'Catamaran Bold';\nmargin-inline: auto;\nbackground: rgba(32, 168, 241, 0.1);\nborder: 1px solid rgba(75, 174, 227, 0.32);\n}\n\n.regular-banner__text {\nfont-size: 1.5rem;\nmargin: 0;\n}\n\n.highlight {\ncolor: #ea2526;\n}\n\n.regular-banner__link {\npadding: 0.5rem 1.5rem;\nfont-weight: 500;\ntext-decoration: none;\nborder-radius: 0.5rem;\ncolor: #FFFFFF;\nbackground-color: #1491D4;\ntext-align: center;\ntransition: all 0.2s ease-in;\n}\n\n.regular-banner__link:hover {\nbackground-color: #68CBFF;\ncolor: white;\n}\n<\/style>\n<!-- Regular Banner Styles END -->\n\n\n\n<h2 class=\"wp-block-heading\">Triaging Threats in Minutes Instead of Hours <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">By integrating ANY.RUN, the organization successfully transitioned from time-intensive manual forensics to a streamlined interactive triage process.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The efficiency allows a lean core team to handle enterprise-level volumes of data, <strong>accelerating the time-to-block<\/strong> for confirmed threats and significantly increasing daily analyst throughput. <\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">&#8220;For complex cases, ANY.RUN helped reduce analysis from hours of manual checking to minutes of interactive validation.&#8221;<\/p>\n<\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\">Exposing Multi-Stage Scams Through Real-Time Human-in-the-Loop Interaction <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Sophisticated cybercrime campaigns in Vietnam, such as &#8220;Kh\u00f4ng M\u1ed9t M\u00ecnh,&#8221; often utilize geo-fencing or multi-stage execution that remains dormant in passive sandboxes. These threats require specific user actions to trigger their malicious payloads.  <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Using ANY.RUN\u2019s <strong>interactive environment, analysts can click <\/strong><a href=\"https:\/\/any.run\/cybersecurity-blog\/enterprise-phishing-resilience\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>through phishing flows<\/strong><\/a><strong>, scroll, and enter data in real time<\/strong> to observe the threat&#8217;s actual behavior. This &#8220;human-in-the-loop&#8221; capability allows the team to <a href=\"https:\/\/any.run\/cybersecurity-blog\/in-browser-data-inspection\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>unmask malicious flows that automated systems miss<\/strong><\/a>, ensuring that complex, interaction-dependent scams are identified and neutralized before they reach victims. <\/p>\n\n\n\n<!-- Highlight Block HTML START -->\n<div class=\"window\">\n  <div class=\"window-header\">\n    <div class=\"pill\">\ud83d\ude80 Key ChongLuaDao Metrics Improved with ANY.RUN<\/div>\n  <\/div>\n  <div class=\"window-body\">\n<ul>\n  <li><strong>Time-to-Verdict:<\/strong> For complex cases, the analysis window was compressed from hours of manual forensic checking to just minutes of interactive validation.<\/li>\n  <li><strong>Time-to-Block:<\/strong> The speed of neutralizing threats increased due to the immediate extraction of network indicators, domains, and IPs directly from the sandbox.<\/li>\n  <li><strong>Daily Analyst Throughput:<\/strong> The number of reports analysts and volunteer moderators can process per day has significantly increased, allowing the team to keep pace with the high volume of user submissions.<\/li>\n<\/ul>\n  <\/div>\n<\/div>\n<!-- Highlight Block HTML END -->\n\n\n<!-- Highlight Block CSS START -->\n<style>\n  .window {\nbackground: rgba(32, 168, 241, 0.1);\nborder: 1px solid rgba(75, 174, 227, 0.32);\n\n    border-radius: 4px;\n    margin: 20px auto 50px auto;\n    padding: 20px 40px;\n    line-height: 2rem;\n  }\n\n  .window-header {\n    display: flex;\n    justify-content: center;\n    margin-bottom: 20px;\n  }\n\n  .pill {\n    background-color: #fff;\n    border-radius: 20px;\n    color: #333;\n    font-weight: bold;\n    padding: 8px 32px;\nborder: 1px solid rgba(75, 174, 227, 0.32);\n  }\n\n  @media (max-width: 480px) {\n    .window {\n      padding: 10px;\n    }\n    \n    .pill {\n      font-size: 14px;\n      padding: 6px 12px;\n    }\n  }\n<\/style>\n<!-- Highlight Block CSS END -->\n\n\n\n<h2 class=\"wp-block-heading\">Reaching Confident Verdicts with Full Visibility into Malicious Behavior <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Maintaining a blocklist for 200 million users requires accurate decisions to avoid disrupting legitimate services. ANY.RUN helps ChongLuaDao achieve this by providing <strong>complete visibility into the behavioral chain<\/strong>, including process trees, network activity, and file system changes.  <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The forensic depth allows analysts to <strong>definitively <\/strong><a href=\"https:\/\/any.run\/cybersecurity-blog\/kali365-phishing-targeting-us\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>distinguish phishing kits<\/strong><\/a><strong> from false alarms or legitimate but abused infrastructure<\/strong>. <\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">&#8220;ANY.RUN improves confidence because <strong>analysts can see the full behavior chain<\/strong> instead of relying only on static indicators.&#8221;<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">By moving from static indicators to observed behavioral proof, ChongLuaDao has <strong>increased the reliability of its intelligence and reduced the risk of false positives<\/strong>. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Providing Actionable Intelligence for Law Enforcement and Global Takedown Partners <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">ChongLuaDao serves as a critical intelligence node for partners like <strong>INTERPOL, UNODC, and global hosting providers<\/strong>. ANY.RUN facilitates this cooperation by generating <strong>forensic-grade reports that include process graphs, screenshots, and detailed network logs<\/strong>.  <\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">&#8220;ANY.RUN makes our reports more actionable because <strong>partners can see not only a suspicious link, but also the observed malicious behavior behind it<\/strong>.&#8221;<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">Complete intelligence packages make the organization&#8217;s findings <strong>immediately actionable for partners<\/strong>, as they provide visual and technical proof of malicious intent rather than just a suspicious URL. The evidence-based approach <strong>directly accelerates the takedown of malicious infrastructure<\/strong> and strengthens global efforts to dismantle cybercrime networks. <\/p>\n\n\n\n<!-- Regular Banner START -->\n<div class=\"regular-banner\">\n<!-- Text Content -->\n<p class=\"regular-banner__text\">\n<span class=\"highlight\">Reduce delays between threat confirmation and containment.  <\/span><br>\nGive responders the evidence to act faster. \n<\/p>\n<!-- CTA Link -->\n<a class=\"regular-banner__link\" id=\"article-banner-regular\" href=\"https:\/\/any.run\/enterprise\/?utm_source=anyrunblog&#038;utm_medium=article&#038;utm_campaign=ChongLuaDao-success-story&#038;utm_term=050826&#038;utm_content=linktoenterpriseform#contact-sales\" rel=\"noopener\" target=\"_blank\">\nAccelerate Incident Response<\/a>\n<\/div>\n<!-- Regular Banner END -->\n<!-- Regular Banner Styles START -->\n\n<style>\n.regular-banner {\ndisplay: flex;\ntext-align: center;\nflex-direction: column;\nalign-items: center;\ngap: 1.5rem;\nwidth: 100%;\npadding: 2rem;\nmargin: 1.5rem 0;\nborder-radius: 0.5rem;\nfont-family: 'Catamaran Bold';\nmargin-inline: auto;\nbackground: rgba(32, 168, 241, 0.1);\nborder: 1px solid rgba(75, 174, 227, 0.32);\n}\n\n.regular-banner__text {\nfont-size: 1.5rem;\nmargin: 0;\n}\n\n.highlight {\ncolor: #ea2526;\n}\n\n.regular-banner__link {\npadding: 0.5rem 1.5rem;\nfont-weight: 500;\ntext-decoration: none;\nborder-radius: 0.5rem;\ncolor: #FFFFFF;\nbackground-color: #1491D4;\ntext-align: center;\ntransition: all 0.2s ease-in;\n}\n\n.regular-banner__link:hover {\nbackground-color: #68CBFF;\ncolor: white;\n}\n<\/style>\n<!-- Regular Banner Styles END -->\n\n\n\n<h2 class=\"wp-block-heading\">Conclusion <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The <strong>ChongLuaDao<\/strong> case demonstrates how a <strong>lean, community-driven non-profit<\/strong> can successfully defend <strong>200 million users<\/strong> by augmenting human expertise with professional-grade interactive analysis. By integrating <strong>ANY.RUN<\/strong>, the organization has effectively addressed the challenge of <strong>scam infrastructure<\/strong>, transforming what was once a manual bottleneck into a high-speed, <strong>evidence-based validation workflow<\/strong>. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We would like to thank the <strong>ChongLuaDao leadership and their community of 200+ volunteer experts<\/strong> for allowing us an inside look at their security operations. Their commitment to making online safety free and accessible is an inspiration, and we are proud to support their mission to build a <strong>safer digital environment for millions of users<\/strong> globally. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">About ANY.RUN <\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/any.run\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=ChongLuaDao-success-story&amp;utm_term=050826&amp;utm_content=linktolanding\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>ANY.RUN<\/strong><\/a>, a leading provider of interactive malware analysis and threat intelligence solutions, helps SOC teams, <a href=\"https:\/\/any.run\/mssp\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=ChongLuaDao-success-story&amp;utm_term=050826&amp;utm_content=linktomssplanding\" target=\"_blank\" rel=\"noreferrer noopener\">MSSPs<\/a>, and enterprises investigate threats faster and make more confident security decisions. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">With its <a href=\"https:\/\/any.run\/features\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=ChongLuaDao-success-story&amp;utm_term=050826&amp;utm_content=linktosandboxlanding\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>cloud-based Interactive Sandbox<\/strong><\/a>, security teams can safely analyze suspicious files, links, and emails in real time, observe malicious behavior, and receive <strong>clear evidence for response<\/strong> without maintaining complex in-house infrastructure. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/intelligence.any.run\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=ChongLuaDao-success-story&amp;utm_term=050826&amp;utm_content=linktotiservice\" target=\"_blank\" rel=\"noreferrer noopener\">ANY.RUN\u2019s Threat Intelligence solutions<\/a> also help organizations uncover threat context, enrich security workflows, and improve visibility into emerging risks. Together, these capabilities support <strong>faster triage, stronger incident prevention, and more efficient security operations at scale<\/strong>. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/any.run\/enterprise\/?utm_source=anyrunblog&amp;utm_medium=article&amp;utm_campaign=ChongLuaDao-success-story&amp;utm_term=050826&amp;utm_content=linktoenterpriseform#contact-sales\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Scale your SOC with faster threat validation \u2192<\/strong><\/a><strong><\/strong> <\/p>\n","protected":false},"excerpt":{"rendered":"<p>ChongLuaDao protects over 200 million users from cybercrime, having detected more than 1.4 million malicious websites since 2020. Rapid processing of community reports is essential to their operations. In our recent conversation, ChongLuaDao co-founder Hieu Ngo told us how ANY.RUN plays an integral role in the project&#8217;s infrastructure, helping it power thousands of safety checks [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":22462,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[79],"tags":[57,10],"class_list":["post-22449","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-customer-success","tag-anyrun","tag-cybersecurity"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>ChongLuaDao: Safeguarding 200 Million Users with ANY.RUN<\/title>\n<meta name=\"description\" content=\"See how ChongLuaDao protects 200 million users against phishing threats with the help of ANY.RUN&#039;s Interactive Sandbox.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/any.run\/cybersecurity-blog\/chongluadao-success-story\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"ANY.RUN\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/chongluadao-success-story\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/chongluadao-success-story\\\/\"},\"author\":{\"name\":\"ANY.RUN\",\"@id\":\"https:\\\/\\\/any.run\\\/\"},\"headline\":\"Safeguarding 200M Users: How ChongLuaDao Scales Threat Validation with ANY.RUN\",\"datePublished\":\"2026-08-05T08:01:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/chongluadao-success-story\\\/\"},\"wordCount\":1407,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/any.run\\\/\"},\"image\":{\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/chongluadao-success-story\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/ChongLuaDao-scaled.png\",\"keywords\":[\"ANYRUN\",\"cybersecurity\"],\"articleSection\":[\"Customer Success Story\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/chongluadao-success-story\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/chongluadao-success-story\\\/\",\"url\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/chongluadao-success-story\\\/\",\"name\":\"ChongLuaDao: Safeguarding 200 Million Users with ANY.RUN\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/any.run\\\/\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/chongluadao-success-story\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/chongluadao-success-story\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/ChongLuaDao-scaled.png\",\"datePublished\":\"2026-08-05T08:01:49+00:00\",\"description\":\"See how ChongLuaDao protects 200 million users against phishing threats with the help of ANY.RUN's Interactive Sandbox.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/chongluadao-success-story\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/chongluadao-success-story\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/chongluadao-success-story\\\/#primaryimage\",\"url\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/ChongLuaDao-scaled.png\",\"contentUrl\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/ChongLuaDao-scaled.png\",\"width\":2560,\"height\":1243},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/chongluadao-success-story\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Customer Success Story\",\"item\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/category\\\/customer-success\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Safeguarding 200M Users: How ChongLuaDao Scales Threat Validation with ANY.RUN\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/any.run\\\/\",\"url\":\"https:\\\/\\\/any.run\\\/\",\"name\":\"ANY.RUN&#039;s Cybersecurity Blog\",\"description\":\"Cybersecurity Blog covers topics for experienced professionals as well as for those new to it.\",\"publisher\":{\"@id\":\"https:\\\/\\\/any.run\\\/\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/any.run\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/any.run\\\/\",\"name\":\"ANY.RUN\",\"url\":\"https:\\\/\\\/any.run\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/any.run\\\/\",\"url\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/ANYRUN-Icon.svg\",\"contentUrl\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/ANYRUN-Icon.svg\",\"width\":1,\"height\":1,\"caption\":\"ANY.RUN\"},\"image\":{\"@id\":\"https:\\\/\\\/any.run\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/www.any.run\\\/\",\"https:\\\/\\\/x.com\\\/anyrun_app\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/30692044\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCOgCPho7lzmH7m6fPNlukrQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/any.run\\\/\",\"name\":\"ANY.RUN\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4a921d1fbcf45a0476667c89b7999bc2bb3c028b518acc569da69c8797e53a84?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4a921d1fbcf45a0476667c89b7999bc2bb3c028b518acc569da69c8797e53a84?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4a921d1fbcf45a0476667c89b7999bc2bb3c028b518acc569da69c8797e53a84?s=96&d=mm&r=g\",\"caption\":\"ANY.RUN\"},\"url\":\"https:\\\/\\\/any.run\\\/cybersecurity-blog\\\/author\\\/a-bespalova\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"ChongLuaDao: Safeguarding 200 Million Users with ANY.RUN","description":"See how ChongLuaDao protects 200 million users against phishing threats with the help of ANY.RUN's Interactive Sandbox.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/any.run\/cybersecurity-blog\/chongluadao-success-story\/","twitter_misc":{"Written by":"ANY.RUN","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/any.run\/cybersecurity-blog\/chongluadao-success-story\/#article","isPartOf":{"@id":"https:\/\/any.run\/cybersecurity-blog\/chongluadao-success-story\/"},"author":{"name":"ANY.RUN","@id":"https:\/\/any.run\/"},"headline":"Safeguarding 200M Users: How ChongLuaDao Scales Threat Validation with ANY.RUN","datePublished":"2026-08-05T08:01:49+00:00","mainEntityOfPage":{"@id":"https:\/\/any.run\/cybersecurity-blog\/chongluadao-success-story\/"},"wordCount":1407,"commentCount":0,"publisher":{"@id":"https:\/\/any.run\/"},"image":{"@id":"https:\/\/any.run\/cybersecurity-blog\/chongluadao-success-story\/#primaryimage"},"thumbnailUrl":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/08\/ChongLuaDao-scaled.png","keywords":["ANYRUN","cybersecurity"],"articleSection":["Customer Success Story"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/any.run\/cybersecurity-blog\/chongluadao-success-story\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/any.run\/cybersecurity-blog\/chongluadao-success-story\/","url":"https:\/\/any.run\/cybersecurity-blog\/chongluadao-success-story\/","name":"ChongLuaDao: Safeguarding 200 Million Users with ANY.RUN","isPartOf":{"@id":"https:\/\/any.run\/"},"primaryImageOfPage":{"@id":"https:\/\/any.run\/cybersecurity-blog\/chongluadao-success-story\/#primaryimage"},"image":{"@id":"https:\/\/any.run\/cybersecurity-blog\/chongluadao-success-story\/#primaryimage"},"thumbnailUrl":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/08\/ChongLuaDao-scaled.png","datePublished":"2026-08-05T08:01:49+00:00","description":"See how ChongLuaDao protects 200 million users against phishing threats with the help of ANY.RUN's Interactive Sandbox.","breadcrumb":{"@id":"https:\/\/any.run\/cybersecurity-blog\/chongluadao-success-story\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/any.run\/cybersecurity-blog\/chongluadao-success-story\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/any.run\/cybersecurity-blog\/chongluadao-success-story\/#primaryimage","url":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/08\/ChongLuaDao-scaled.png","contentUrl":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/08\/ChongLuaDao-scaled.png","width":2560,"height":1243},{"@type":"BreadcrumbList","@id":"https:\/\/any.run\/cybersecurity-blog\/chongluadao-success-story\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/any.run\/cybersecurity-blog\/"},{"@type":"ListItem","position":2,"name":"Customer Success Story","item":"https:\/\/any.run\/cybersecurity-blog\/category\/customer-success\/"},{"@type":"ListItem","position":3,"name":"Safeguarding 200M Users: How ChongLuaDao Scales Threat Validation with ANY.RUN"}]},{"@type":"WebSite","@id":"https:\/\/any.run\/","url":"https:\/\/any.run\/","name":"ANY.RUN&#039;s Cybersecurity Blog","description":"Cybersecurity Blog covers topics for experienced professionals as well as for those new to it.","publisher":{"@id":"https:\/\/any.run\/"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/any.run\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/any.run\/","name":"ANY.RUN","url":"https:\/\/any.run\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/any.run\/","url":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2020\/08\/ANYRUN-Icon.svg","contentUrl":"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2020\/08\/ANYRUN-Icon.svg","width":1,"height":1,"caption":"ANY.RUN"},"image":{"@id":"https:\/\/any.run\/"},"sameAs":["https:\/\/www.facebook.com\/www.any.run\/","https:\/\/x.com\/anyrun_app","https:\/\/www.linkedin.com\/company\/30692044","https:\/\/www.youtube.com\/channel\/UCOgCPho7lzmH7m6fPNlukrQ"]},{"@type":"Person","@id":"https:\/\/any.run\/","name":"ANY.RUN","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/4a921d1fbcf45a0476667c89b7999bc2bb3c028b518acc569da69c8797e53a84?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4a921d1fbcf45a0476667c89b7999bc2bb3c028b518acc569da69c8797e53a84?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4a921d1fbcf45a0476667c89b7999bc2bb3c028b518acc569da69c8797e53a84?s=96&d=mm&r=g","caption":"ANY.RUN"},"url":"https:\/\/any.run\/cybersecurity-blog\/author\/a-bespalova\/"}]}},"_links":{"self":[{"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/posts\/22449","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/comments?post=22449"}],"version-history":[{"count":10,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/posts\/22449\/revisions"}],"predecessor-version":[{"id":22465,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/posts\/22449\/revisions\/22465"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/media\/22462"}],"wp:attachment":[{"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/media?parent=22449"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/categories?post=22449"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/any.run\/cybersecurity-blog\/wp-json\/wp\/v2\/tags?post=22449"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}