Security Scan Report: eh.77tuna.org

Response type:Plain texttext/plainHTTP 200The server returned plain text, not a web page. The screenshot shows the text as a browser displays it.
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 3 countries across 1 domain to perform 2 HTTP transactions. The main domain is 77tuna.org and was registered 6 months ago.

Submitted URL: https://eh.77tuna.org

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Plain-text host flagged as Vidar infostealer infrastructure by two independent feeds and by a critical IDS C2/malware alert. Do not connect or download anything from it.

Risk Factors (4)
Multi-feed content-malware indicator of compromise naming the Vidar infostealer against the scanned URL itself
Critical IDS malware/C2 alert tied to the host's TLS certificate
Plain-text response with no legitimate site content to inspect
No domain reputation (unranked in Cisco Umbrella) and minimal legitimacy signals
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'eh.77tuna.org' on the non-profit oriented generic top-level domain (.org) with subdomain 'eh'. Its registrable label '77tuna' stretches across 6 characters containing 2 vowels alongside 2 consonants; it also includes 2 digits. Tokenizing the label suggests two words: 77, tuna. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://eh.77tuna.org

Page Load Overview

2.10s
Total Load Time
0 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2104.131.68.180Clifton, New Jersey, United States
AS14061DigitalOcean, LLC
045.77.249.79Singapore, Singapore
AS20473The Constant Company, LLC
0178.62.201.34Amsterdam, North Holland, Netherlands
AS14061DigitalOcean, LLC
23--

Content Similarity HashesFor malware variant detection

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3:qVZxQXbZ6iF4:qzxO965

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:a7fe83ec64bb23eb28090598db3d166e

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data