Security Scan Report: bi.86idn.com

Response type:Plain texttext/plainHTTP 200The server returned plain text, not a web page. The screenshot shows the text as a browser displays it.
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 3 countries across 1 domain to perform 2 HTTP transactions. The main domain is 86idn.com and was registered 11 months ago.

Submitted URL: https://bi.86idn.com/cx/

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Plain-text endpoint on an unranked domain whose exact URL is flagged as Vidar infostealer by two independent intel feeds, with a CRITICAL IDS alert for a C2 SSL certificate. Treat as malware infrastructure; do not visit.

Risk Factors (4)
Corroborated content-malware match (Vidar infostealer) on the scanned URL from two independent threat-intelligence feeds
CRITICAL IDS alert for a suspicious SSL certificate observed being used as a command-and-control domain
Plain-text response from a non-branded, unranked domain with no legitimate purpose visible
Very low business legitimacy score with no identifiable organisation behind the host
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'bi.86idn.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'bi'. The second-level label '86idn' is 5 characters long holding 1 vowel versus two consonants; it also includes 2 digits. Breaking it apart gives three words: 86, id, n. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bi.86idn.com/cx/

Page Load Overview

1.70s
Total Load Time
0 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
245.77.249.79Singapore, Singapore
AS20473The Constant Company, LLC
0178.62.201.34Amsterdam, North Holland, Netherlands
AS14061DigitalOcean, LLC
0104.131.68.180Clifton, New Jersey, United States
AS14061DigitalOcean, LLC
23--

Content Similarity HashesFor malware variant detection

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3:qVZxQXbZ6iF4:qzxO965

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:a7fe83ec64bb23eb28090598db3d166e

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data