Security Scan Report: r.78royal.org

Response type:Plain texttext/plainHTTP 200The server returned plain text, not a web page. The screenshot shows the text as a browser displays it.
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 2 countries across 1 domain to perform 2 HTTP transactions. The main domain is 78royal.org and was registered 5 months ago.

Submitted URL: https://r.78royal.org

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Plain-text endpoint on a 167-day-old, unranked domain flagged by two independent feeds as Vidar malware and hit by a critical C2 SSL-certificate IDS alert; treat as a malware/C2 host and do not interact.

Risk Factors (3)
URL-level threat-intel match for the Vidar infostealer family on the primary domain, corroborated by two independent feeds
Critical IDS malware/C2 SSL certificate alert tied to this address
Content-free plain-text response from a recently registered, unranked domain — atypical for any legitimate public service
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'r.78royal.org' uses the non-profit oriented generic top-level domain (.org); it also runs on subdomain 'r'. Its registrable label '78royal' stretches across 7 characters split between two vowels and three consonants, along with two digits. Splitting it apart reveals 2 words: 78, royal. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://r.78royal.org

Page Load Overview

3.45s
Total Load Time
0 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
145.77.249.79Singapore, Singapore
AS20473The Constant Company, LLC
1178.62.201.34Amsterdam, North Holland, Netherlands
AS14061DigitalOcean, LLC
22--

Content Similarity HashesFor malware variant detection

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3:qVZxQXbZ6iF4:qzxO965

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:a7fe83ec64bb23eb28090598db3d166e

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data