172.67.154.91VirusTotal
3 / 92 engine detections
Analysis:
Open report VirusTotalOriginal source recordObserved: 12 fields
Observed: · Retrieved:
Vendor result counts
- Timeout
- 0
- Harmless
- 55
- Malicious
- 1
- Suspicious
- 2
- Undetected
- 34
Vendor labels
- Gridinsoft
- suspicious
- Chong Lua Dao
- malicious
- alphaMountain.ai
- suspicious
Reputation score
0Popularity ranks
- Majestic
- 997777
Created
Updated
First seen
DNS records
- TTL, seconds
- 3252
- Type
- A
- Value
- 46.8.9.226
- TTL, seconds
- 3252
- Type
- A
- Value
- 46.8.9.227
- TTL, seconds
- 3252
- Type
- A
- Value
- 46.8.9.223
- TTL, seconds
- 3600
- Type
- NS
- Value
- ns2.parktons.com
- TTL, seconds
- 3600
- Type
- MX
- Value
- mail.parktons.com
- Priority
- 10
- TTL, seconds
- 3600
- Type
- NS
- Value
- ns.parktons.com
- TTL, seconds
- 3252
- Type
- A
- Value
- 46.8.9.224
- TTL, seconds
- 3252
- Type
- A
- Value
- 46.8.9.222
- TTL, seconds
- 3252
- Type
- A
- Value
- 46.8.9.228
- TTL, seconds
- 3252
- Type
- A
- Value
- 46.8.9.225
- TTL, seconds
- 3252
- Type
- A
- Value
- 46.8.9.220
- TTL, seconds
- 3600
- Type
- SOA
- Responsible mailbox
- root.parktons.com
- Value
- ns.parktons.com
- TTL, seconds
- 3252
- Type
- A
- Value
- 46.8.9.229
DNS records observed
JARM fingerprint
40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319Certificate
- Subject alternative names
- *.amlscreening.center
- amlscreening.center
- Issuer
- Let's Encrypt / YE2
- Serial
- 55d378d25bbffcd3466734c76a133738def
- SHA-256
- 4a214df7a11288f91417d14f0084af48b9635a38fe7aa3862ca1b8fe2048c9b3
- Subject
- *.amlscreening.center
- Valid until
- Valid from
Registry data (RDAP)
- Status
- client transfer prohibited
- Registry events
- Transfer
- Last changed
- Registration
- Registrar expiration
- Last RDAP database update
- Registrar
- Gransy, s.r.o.
- Registrar IANA ID
- 1505
Original source fields · JSON
| Vendor result counts | {
"timeout": 0,
"harmless": 55,
"malicious": 1,
"suspicious": 2,
"undetected": 34
} |
|---|---|
| Vendor labels | {
"Gridinsoft": "suspicious",
"Chong Lua Dao": "malicious",
"alphaMountain.ai": "suspicious"
} |
| Reputation | 0 |
| Popularity | {
"Majestic": 997777
} |
| Created | 2024-10-02T00:00:00Z |
| Updated | 2024-10-02T00:00:00Z |
| First seen | 2024-10-02T18:17:42Z |
| DNS records | [
{
"ttl": 3252,
"type": "A",
"value": "46.8.9.226"
},
{
"ttl": 3252,
"type": "A",
"value": "46.8.9.227"
},
{
"ttl": 3252,
"type": "A",
"value": "46.8.9.223"
},
{
"ttl": 3600,
"type": "NS",
"value": "ns2.parktons.com"
},
{
"ttl": 3600,
"type": "MX",
"value": "mail.parktons.com",
"priority": 10
},
{
"ttl": 3600,
"type": "NS",
"value": "ns.parktons.com"
},
{
"ttl": 3252,
"type": "A",
"value": "46.8.9.224"
},
{
"ttl": 3252,
"type": "A",
"value": "46.8.9.222"
},
{
"ttl": 3252,
"type": "A",
"value": "46.8.9.228"
},
{
"ttl": 3252,
"type": "A",
"value": "46.8.9.225"
},
{
"ttl": 3252,
"type": "A",
"value": "46.8.9.220"
},
{
"ttl": 3600,
"type": "SOA",
"rname": "root.parktons.com",
"value": "ns.parktons.com"
},
{
"ttl": 3252,
"type": "A",
"value": "46.8.9.229"
}
] |
| Dns at | 2026-10-31T01:44:50Z |
| Jarm | 40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319 |
| Certificate | {
"san": [
"*.amlscreening.center",
"amlscreening.center"
],
"issuer": "Let's Encrypt / YE2",
"serial": "55d378d25bbffcd3466734c76a133738def",
"sha256": "4a214df7a11288f91417d14f0084af48b9635a38fe7aa3862ca1b8fe2048c9b3",
"subject": "*.amlscreening.center",
"valid_to": "2026-12-31T21:28:01Z",
"valid_from": "2026-10-02T21:28:02Z"
} |
| Registry data | {
"status": [
"client transfer prohibited"
],
"events": {
"transfer": "2025-06-21T00:00:00Z",
"last changed": "2026-10-02T00:00:00Z",
"registration": "2024-10-02T00:00:00Z",
"registrar expiration": "2026-10-02T00:00:00Z",
"last update of RDAP database": "2026-10-28T01:44:00Z"
},
"registrar": "Gransy, s.r.o.",
"registrar_iana_id": "1505"
} |
Separate collector summary
This is a separate stored result. Its counts, vendors and dates do not replace the provider observation above. A retrieval date is not an analysis date.
- source
- VirusTotal
- scope
- unknown
- result_state
- null
- numerator
- 3
- denominator
- 91
- malicious
- null
- suspicious
- null
- vendors
- ["alphaMountain.ai","Chong Lua Dao","Gridinsoft"]
- observed_at
- null
- checked_at
- 2026-09-26 04:27:29
- fetched_at
- null
- time_basis
- as stored; legacy timezone not established
Microsoft
Cloudflare
Yandex
ESET
Bitdefender
Norton
Symantec
Avira
Avast / AVG
Kaspersky
Dr.Web
Netcraft
PhishTank
APWG eCX
PhishStats
Phish.Report
PolySwarm
CheckPhish
Quttera
Criminal IP
CRDF
Scamadviser
MyWOT
