idos-network[.]app

Analysis as of July 25 2026 indicates that the domain idos-network.app is currently taken offline, returning an “Account Suspended” page title. The domain was registered on October 21 2025 through NiceNIC International Group Co., Limited and uses the authoritative nameservers ns3-ams.v-sys.org and ns4-ams.v-sys.org. DNS resolution points to the IPv4 address 213.111.155.88, which is announced by AS43641 (SOLLUTIUM EU Sp z.o.o.) and geolocated in the Netherlands. No TLS certificate is presented for the host, meaning HTTPS connections are not available.

The domain appears on two public blocklists and has been explicitly flagged by the PhishDestroy and ScamSniffer filtering services. VirusTotal scans show that seven of ninety‑five security vendors have marked the domain as malicious, reinforcing the suspicion of abusive activity. The listed scam type is “Account Takeover,” suggesting that the infrastructure may have been used to harvest credentials or to hijack legitimate user accounts. Because the site is offline, direct content inspection is not possible, leaving the precise payload and victim‑targeting details unknown.

However, the combination of recent registration, dedicated hosting under a known ASN, absence of SSL, and multiple independent detections provides a strong indicator of malicious intent. Defenders should add the domain and its resolving IP to network and endpoint blocklists, monitor DNS queries for similar “ns3-ams.v-sys.org” patterns, and enforce TLS‑only policies to mitigate potential future re‑use of the same infrastructure. Continuous re‑evaluation is advised in case the domain is re‑activated or the IP address is repurposed for other campaigns.