Security Scan Report: be.86idn.com

Response type:Plain texttext/plainHTTP 200The server returned plain text, not a web page. The screenshot shows the text as a browser displays it.
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 2 countries across 1 domain to perform 2 HTTP transactions. The main domain is 86idn.com and was registered 11 months ago.

Submitted URL: https://be.86idn.com/ox/

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Plain-text endpoint on be.86idn.com/ox/ whose exact URL is flagged as Vidar infostealer malware by two independent feeds and whose host triggers a critical IDS C2/malware alert. Strong malware-delivery indicator; do not interact.

Risk Factors (4)
Vidar infostealer URL indicator corroborated by two threat-intelligence feeds on the exact scanned address
Critical IDS malware/C2 detection associated with the host's TLS certificate
Plain-text response on a functionless path (/ox/) with no legitimate site content
No reputation, negligible legitimacy signals and no explanation for the endpoint's purpose
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'be.86idn.com' on the commercial generic top-level domain (.com), featuring subdomain 'be'. The registrable portion '86idn' spans 5 characters containing one vowel alongside 2 consonants, plus two digits. Tokenizing the label suggests three words: 86, id, n. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://be.86idn.com/ox/

Page Load Overview

1.95s
Total Load Time
0 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
145.77.249.79Singapore, Singapore
AS20473The Constant Company, LLC
1178.62.201.34Amsterdam, North Holland, Netherlands
AS14061DigitalOcean, LLC
22--

Content Similarity HashesFor malware variant detection

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3:qVZxQXbZ6iF4:qzxO965

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:a7fe83ec64bb23eb28090598db3d166e

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data