VirusTotal
1 / 92 engine detections · stored summary
Open reportVirusTotalOriginal source recordObserved: 12 fields
Observed: · Retrieved:
Vendor result counts
- Timeout
- 0
- Harmless
- 56
- Malicious
- 0
- Suspicious
- 1
- Undetected
- 35
Vendor labels
- alphaMountain.ai
- suspicious
Reputation score
0Categories
- Sophos
- phishing and fraud
- Webroot
- Phishing and Other Frauds
- alphaMountain.ai
- Phishing (alphaMountain.ai)
- Forcepoint ThreatSeeker
- phishing and other frauds
Created
Updated
First seen
DNS records
- TTL, seconds
- 14400
- Type
- A
- Value
- 198.251.89.144
- TTL, seconds
- 14400
- Type
- TXT
- Value
- v=spf1 +a +mx +ip4:192.168.168.2 ~all
- TTL, seconds
- 21600
- Type
- NS
- Value
- ns15.my-control-panel.com
- TTL, seconds
- 21600
- Type
- SOA
- Responsible mailbox
- alerts.my-control-panel.com
- Value
- ns15.my-control-panel.com
- TTL, seconds
- 14400
- Type
- MX
- Value
- digitalwebprints.info
- Priority
- 0
- TTL, seconds
- 21600
- Type
- NS
- Value
- ns16.my-control-panel.com
DNS records observed
JARM fingerprint
29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3aeCertificate
- Subject alternative names
- *.shipping.digitalwebprints.com
- autodiscover.digitalwebprints.info
- bayswift.xyz
- cpanel.digitalwebprints.info
- cpcalendars.digitalwebprints.info
- cpcontacts.digitalwebprints.info
- digitalwebprints.info
- mail.digitalwebprints.info
- shipping.digitalwebprints.com
- shippings.igitalwebprints.cpm.digitalwebprints.info
- Issuer
- Let's Encrypt / YR2
- Serial
- 6048993a590c6b9309ffbd5a0d8a957ba1a
- SHA-256
- c6bd8ea12ffa6db0d05d630b253a027bcc62ce88bc040b448aebc608a77770bd
- Subject
- webdisk.digitalwebprints.info
- Valid until
- Valid from
Registry data (RDAP)
- Status
- transfer prohibited
- Registry events
- Expiration
- Last changed
- Registration
- Registrar expiration
- Last RDAP database update
- Registrar
- DYNADOT LLC
- Registrar IANA ID
- 472
Original source fields · JSON
| Vendor result counts | {
"timeout": 0,
"harmless": 56,
"malicious": 0,
"suspicious": 1,
"undetected": 35
} |
|---|---|
| Vendor labels | {
"alphaMountain.ai": "suspicious"
} |
| Reputation | 0 |
| Categories | {
"Sophos": "phishing and fraud",
"Webroot": "Phishing and Other Frauds",
"alphaMountain.ai": "Phishing (alphaMountain.ai)",
"Forcepoint ThreatSeeker": "phishing and other frauds"
} |
| Created | 2025-12-21T00:00:00Z |
| Updated | 2025-12-22T00:00:00Z |
| First seen | 2025-12-22T07:03:11Z |
| DNS records | [
{
"ttl": 14400,
"type": "A",
"value": "198.251.89.144"
},
{
"ttl": 14400,
"type": "TXT",
"value": "v=spf1 +a +mx +ip4:192.168.168.2 ~all"
},
{
"ttl": 21600,
"type": "NS",
"value": "ns15.my-control-panel.com"
},
{
"ttl": 21600,
"type": "SOA",
"rname": "alerts.my-control-panel.com",
"value": "ns15.my-control-panel.com"
},
{
"ttl": 14400,
"type": "MX",
"value": "digitalwebprints.info",
"priority": 0
},
{
"ttl": 21600,
"type": "NS",
"value": "ns16.my-control-panel.com"
}
] |
| Dns at | 2026-10-23T23:11:15Z |
| Jarm | 29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae |
| Certificate | {
"san": [
"*.shipping.digitalwebprints.com",
"autodiscover.digitalwebprints.info",
"bayswift.xyz",
"cpanel.digitalwebprints.info",
"cpcalendars.digitalwebprints.info",
"cpcontacts.digitalwebprints.info",
"digitalwebprints.info",
"mail.digitalwebprints.info",
"shipping.digitalwebprints.com",
"shippings.igitalwebprints.cpm.digitalwebprints.info"
],
"issuer": "Let's Encrypt / YR2",
"serial": "6048993a590c6b9309ffbd5a0d8a957ba1a",
"sha256": "c6bd8ea12ffa6db0d05d630b253a027bcc62ce88bc040b448aebc608a77770bd",
"subject": "webdisk.digitalwebprints.info",
"valid_to": "2027-01-07T12:12:35Z",
"valid_from": "2026-10-09T12:12:36Z"
} |
| Registry data | {
"status": [
"transfer prohibited"
],
"events": {
"expiration": "2026-12-21T15:25:49Z",
"last changed": "2025-12-22T05:48:43Z",
"registration": "2025-12-21T15:25:49Z",
"registrar expiration": "2026-12-21T15:25:49Z",
"last update of RDAP database": "2026-10-23T10:09:49Z"
},
"registrar": "DYNADOT LLC",
"registrar_iana_id": "472"
} |
Separate source record · 0 malicious + 1 suspicious / 92 · 2026-10-23 23:09:56 UTC
The summary above and this provider record were collected at different times. Both remain available; malicious and suspicious classifications are shown separately.
- record_source
- collected_observations.vt
- analysis_at
- 2026-10-23T23:09:56Z
- fetched_at
- 2026-10-26T16:28:02Z
- stats
- {"timeout":0,"harmless":56,"malicious":0,"suspicious":1,"undetected":35}
