Security Scan Report: r4.86idn.com

Response type:Plain texttext/plainHTTP 200The server returned plain text, not a web page. The screenshot shows the text as a browser displays it.
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 3 countries across 1 domain to perform 2 HTTP transactions. The main domain is 86idn.com and was registered 11 months ago.

Submitted URL: https://r4.86idn.com/v2/

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

Plain-text endpoint on an unranked domain, flagged as Vidar malware infrastructure by two independent feeds and by a critical C2-related IDS alert. Do not visit or interact.

Risk Factors (4)
Primary URL listed as Vidar malware infrastructure across two independent threat-intelligence feeds
Critical IDS detection of C2-associated SSL certificate
Plain-text response with no legitimate page content — typical of a command-and-control or payload endpoint
No reputation, no legitimacy signals, and no operator identity behind the domain
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'r4.86idn.com' is registered, featuring subdomain 'r4'. Count 5 characters in '86idn' split between one vowel and two consonants; bonus characters include two digits. Segmentation suggests 3 words: 86, id, n. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://r4.86idn.com/v2/

Page Load Overview

0.76s
Total Load Time
0 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
245.77.249.79Singapore, Singapore
AS20473The Constant Company, LLC
0178.62.201.34Amsterdam, North Holland, Netherlands
AS14061DigitalOcean, LLC
0104.131.68.180Clifton, New Jersey, United States
AS14061DigitalOcean, LLC
23--

Content Similarity HashesFor malware variant detection

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3:qVZxQXbZ6iF4:qzxO965

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:a7fe83ec64bb23eb28090598db3d166e

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data