VirusTotal
2 / 92 engine detections
VirusTotalOriginal source recordObserved: 15 fields
Observed: · Retrieved:
Vendor result counts
- Timeout
- 0
- Harmless
- 52
- Malicious
- 2
- Suspicious
- 0
- Undetected
- 38
Vendor labels
- CRDF
- malicious
- LevelBlue
- phishing
Reputation score
0Categories
- Webroot
- Phishing and Other Frauds
- alphaMountain.ai
- Phishing (alphaMountain.ai)
- Forcepoint ThreatSeeker
- newly registered websites
Registrar
Wild West Domains, LLCCreated
Expires
Updated
First seen
DNS records
- TTL, seconds
- 1800
- Type
- TXT
- Value
- zoho-verification=zb04403870.zmverify.zoho.com
- TTL, seconds
- 3600
- Type
- SOA
- Responsible mailbox
- azuredns-hostmaster.microsoft.com
- Value
- ns1.bdm.microsoftonline.com
- TTL, seconds
- 21600
- Type
- NS
- Value
- ns3.bdm.microsoftonline.com
- TTL, seconds
- 1800
- Type
- A
- Value
- 4.150.186.111
- TTL, seconds
- 1800
- Type
- MX
- Value
- mx2.zoho.com
- Priority
- 20
- TTL, seconds
- 21600
- Type
- NS
- Value
- ns4.bdm.microsoftonline.com
- TTL, seconds
- 21600
- Type
- NS
- Value
- ns1.bdm.microsoftonline.com
- TTL, seconds
- 1800
- Type
- TXT
- Value
- mscid=GQTKyTOZg/KCWH+V6zXkFTn9z8cy/wBoNqdX3kc95Dm5nEAAca3J4fuwC+Z39/8fDGBICuyktB8cvcVAUgIwOg==
- TTL, seconds
- 1800
- Type
- MX
- Value
- mx.zoho.com
- Priority
- 10
- TTL, seconds
- 21600
- Type
- NS
- Value
- ns2.bdm.microsoftonline.com
- TTL, seconds
- 1800
- Type
- TXT
- Value
- v=spf1 include:zohomail.com include:spf.protection.outlook.com -all
- TTL, seconds
- 1800
- Type
- MX
- Value
- mx3.zoho.com
- Priority
- 50
DNS records observed
JARM fingerprint
27d40d40d00040d00042d43d000000d2e61cae37a985f75ecafb81b33ca523Certificate
- Subject alternative names
- advancedpoultrv.com
- Issuer
- Let's Encrypt / YE1
- Serial
- 6dfca1b5ad3ffbe135cb17fdb3ab77268de
- SHA-256
- a16e2faa91437703847ae25541b8835051a7835f6954b1a8f7c58ce5bff63698
- Subject
- advancedpoultrv.com
- Valid until
- Valid from
Registration record
- Registrar
- Wild West Domains, LLC
- Registrar IANA ID
- 440
- Registrar URL
- http://www.wildwestdomains.com
- Registered
- Updated
- Expires
- Status
- clientDeleteProhibited
- clientRenewProhibited
- clientTransferProhibited
- clientUpdateProhibited
- Nameservers
- ns1.bdm.microsoftonline.com
- ns2.bdm.microsoftonline.com
- DNSSEC
- unsigned
Registry data (RDAP)
- Status
- client delete prohibited
- client renew prohibited
- client transfer prohibited
- client update prohibited
- Registry events
- Expiration
- Last changed
- Registration
- Last RDAP database update
Original source fields · JSON
| Vendor result counts | {
"timeout": 0,
"harmless": 52,
"malicious": 2,
"suspicious": 0,
"undetected": 38
} |
|---|---|
| Vendor labels | {
"CRDF": "malicious",
"LevelBlue": "phishing"
} |
| Reputation | 0 |
| Categories | {
"Webroot": "Phishing and Other Frauds",
"alphaMountain.ai": "Phishing (alphaMountain.ai)",
"Forcepoint ThreatSeeker": "newly registered websites"
} |
| Registrar | Wild West Domains, LLC |
| Created | 2026-10-09T16:21:11Z |
| Expires | 2027-10-09T16:21:11Z |
| Updated | 2026-10-09T16:21:11Z |
| First seen | 2026-10-09T17:18:43Z |
| DNS records | [
{
"ttl": 1800,
"type": "TXT",
"value": "zoho-verification=zb04403870.zmverify.zoho.com"
},
{
"ttl": 3600,
"type": "SOA",
"rname": "azuredns-hostmaster.microsoft.com",
"value": "ns1.bdm.microsoftonline.com"
},
{
"ttl": 21600,
"type": "NS",
"value": "ns3.bdm.microsoftonline.com"
},
{
"ttl": 1800,
"type": "A",
"value": "4.150.186.111"
},
{
"ttl": 1800,
"type": "MX",
"value": "mx2.zoho.com",
"priority": 20
},
{
"ttl": 21600,
"type": "NS",
"value": "ns4.bdm.microsoftonline.com"
},
{
"ttl": 21600,
"type": "NS",
"value": "ns1.bdm.microsoftonline.com"
},
{
"ttl": 1800,
"type": "TXT",
"value": "mscid=GQTKyTOZg/KCWH+V6zXkFTn9z8cy/wBoNqdX3kc95Dm5nEAAca3J4fuwC+Z39/8fDGBICuyktB8cvcVAUgIwOg=="
},
{
"ttl": 1800,
"type": "MX",
"value": "mx.zoho.com",
"priority": 10
},
{
"ttl": 21600,
"type": "NS",
"value": "ns2.bdm.microsoftonline.com"
},
{
"ttl": 1800,
"type": "TXT",
"value": "v=spf1 include:zohomail.com include:spf.protection.outlook.com -all"
},
{
"ttl": 1800,
"type": "MX",
"value": "mx3.zoho.com",
"priority": 50
}
] |
| Dns at | 2026-10-22T22:50:09Z |
| Jarm | 27d40d40d00040d00042d43d000000d2e61cae37a985f75ecafb81b33ca523 |
| Certificate | {
"san": [
"advancedpoultrv.com"
],
"issuer": "Let's Encrypt / YE1",
"serial": "6dfca1b5ad3ffbe135cb17fdb3ab77268de",
"sha256": "a16e2faa91437703847ae25541b8835051a7835f6954b1a8f7c58ce5bff63698",
"subject": "advancedpoultrv.com",
"valid_to": "2027-01-20T06:51:46Z",
"valid_from": "2026-10-22T06:51:47Z"
} |
| Registration record | {
"registrar": "Wild West Domains, LLC",
"registrar_iana_id": "440",
"registrar_url": "http://www.wildwestdomains.com",
"created": "2026-10-09T16:21:11Z",
"updated": "2026-10-09T16:21:11Z",
"expires": "2027-10-09T16:21:11Z",
"status": [
"clientDeleteProhibited",
"clientRenewProhibited",
"clientTransferProhibited",
"clientUpdateProhibited"
],
"nameservers": [
"ns1.bdm.microsoftonline.com",
"ns2.bdm.microsoftonline.com"
],
"dnssec": "unsigned"
} |
| Registry data | {
"status": [
"client delete prohibited",
"client renew prohibited",
"client transfer prohibited",
"client update prohibited"
],
"events": {
"expiration": "2027-10-09T16:21:11Z",
"last changed": "2026-10-09T16:21:11Z",
"registration": "2026-10-09T16:21:11Z",
"last update of RDAP database": "2026-10-22T10:48:05Z"
}
} |
Separate collector summary
This is a separate stored result. Its counts, vendors and dates do not replace the provider observation above. A retrieval date is not an analysis date.
- source
- VirusTotal
- scope
- unknown
- result_state
- observed
- numerator
- 16
- denominator
- 92
- malicious
- null
- suspicious
- null
- vendors
- ["alphaMountain.ai","BitDefender","CRDF","Emsisoft","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","LevelBlue","Lionic","Netcraft","Seclookup","SOCRadar","Sophos","Webroot"]
- observed_at
- null
- checked_at
- 2026-10-27 04:03:22
- fetched_at
- 2026-10-27 03:03:22
- time_basis
- as stored; legacy timezone not established
