89.104.79.186VirusTotal
5 / 92 engine detections
Analysis:
Open report VirusTotalOriginal source recordObserved: 12 fields
Observed: · Retrieved:
Vendor result counts
- Timeout
- 0
- Harmless
- 52
- Malicious
- 4
- Suspicious
- 1
- Undetected
- 35
Vendor labels
- CRDF
- malicious
- Gridinsoft
- suspicious
- Chong Lua Dao
- malicious
- alphaMountain.ai
- phishing
- Forcepoint ThreatSeeker
- phishing
Reputation score
0Popularity ranks
- Alexa
- 549258
- Statvoo
- 599511
Created
Updated
First seen
DNS records
- TTL, seconds
- 3600
- Type
- NS
- Value
- ns3-l2.nic.ru
- TTL, seconds
- 3600
- Type
- NS
- Value
- ns4-cloud.nic.ru
- TTL, seconds
- 3600
- Type
- NS
- Value
- ns4-l2.nic.ru
- TTL, seconds
- 3600
- Type
- TXT
- Value
- google-site-verification=W5Udz6PQ6nmvACurNmwG0usO9BPEX0fk6lrovHJ4hsU
- TTL, seconds
- 3600
- Type
- MX
- Value
- mx2.zoho.com
- Priority
- 20
- TTL, seconds
- 3600
- Type
- TXT
- Value
- zoho-verification=zb99070796.zmverify.zoho.com
- TTL, seconds
- 3600
- Type
- TXT
- Value
- google-site-verification=tX0cUrWBIRk_2HnzT5LNh72pvnvVNMpoog-Z1OdLzvY
- TTL, seconds
- 3600
- Type
- NS
- Value
- ns8-l2.nic.ru
- TTL, seconds
- 3600
- Type
- TXT
- Value
- zoho-verification=zb40527120.zmverify.zoho.com
- TTL, seconds
- 3600
- Type
- MX
- Value
- mx.zoho.com
- Priority
- 10
- TTL, seconds
- 3600
- Type
- NS
- Value
- ns8-cloud.nic.ru
- TTL, seconds
- 3600
- Type
- MX
- Value
- mx3.zoho.com
- Priority
- 50
- TTL, seconds
- 3600
- Type
- TXT
- Value
- v=spf1 include:zcsend.net ip4:91.189.114.14 ~all
- TTL, seconds
- 3600
- Type
- SOA
- Responsible mailbox
- dns.nic.ru
- Value
- ns3-l2.nic.ru
- TTL, seconds
- 3600
- Type
- A
- Value
- 91.189.114.14
DNS records observed
JARM fingerprint
27d27d27d00027d00042d42d0000007d20e9b9a3e87aa1ec17cb4d646ce9a5Certificate
- Subject alternative names
- ge.agency
- www.ge.agency
- Issuer
- Let's Encrypt / YE2
- Serial
- 5afbc49b7e8ef7add74baa1eb4099a6b596
- SHA-256
- 5b82ec69618a8d8459f29ac87508cbc797820872a7b208b9c8af2c1c5cb29c49
- Subject
- ge.agency
- Valid until
- Valid from
Registry data (RDAP)
- Status
- client transfer prohibited
- Registry events
- Expiration
- Last changed
- Registration
- Registrar expiration
- Last RDAP database update
- Registrar
- Regional Network Information Center JSC dba RU-CENTER
- Registrar IANA ID
- 463
Original source fields · JSON
| Vendor result counts | {
"timeout": 0,
"harmless": 52,
"malicious": 4,
"suspicious": 1,
"undetected": 35
} |
|---|---|
| Vendor labels | {
"CRDF": "malicious",
"Gridinsoft": "suspicious",
"Chong Lua Dao": "malicious",
"alphaMountain.ai": "phishing",
"Forcepoint ThreatSeeker": "phishing"
} |
| Reputation | 0 |
| Popularity | {
"Alexa": 549258,
"Statvoo": 599511
} |
| Created | 2025-07-16T00:00:00Z |
| Updated | 2025-07-16T00:00:00Z |
| First seen | 2024-12-13T22:20:56Z |
| DNS records | [
{
"ttl": 3600,
"type": "NS",
"value": "ns3-l2.nic.ru"
},
{
"ttl": 3600,
"type": "NS",
"value": "ns4-cloud.nic.ru"
},
{
"ttl": 3600,
"type": "NS",
"value": "ns4-l2.nic.ru"
},
{
"ttl": 3600,
"type": "TXT",
"value": "google-site-verification=W5Udz6PQ6nmvACurNmwG0usO9BPEX0fk6lrovHJ4hsU"
},
{
"ttl": 3600,
"type": "MX",
"value": "mx2.zoho.com",
"priority": 20
},
{
"ttl": 3600,
"type": "TXT",
"value": "zoho-verification=zb99070796.zmverify.zoho.com"
},
{
"ttl": 3600,
"type": "TXT",
"value": "google-site-verification=tX0cUrWBIRk_2HnzT5LNh72pvnvVNMpoog-Z1OdLzvY"
},
{
"ttl": 3600,
"type": "NS",
"value": "ns8-l2.nic.ru"
},
{
"ttl": 3600,
"type": "TXT",
"value": "zoho-verification=zb40527120.zmverify.zoho.com"
},
{
"ttl": 3600,
"type": "MX",
"value": "mx.zoho.com",
"priority": 10
},
{
"ttl": 3600,
"type": "NS",
"value": "ns8-cloud.nic.ru"
},
{
"ttl": 3600,
"type": "MX",
"value": "mx3.zoho.com",
"priority": 50
},
{
"ttl": 3600,
"type": "TXT",
"value": "v=spf1 include:zcsend.net ip4:91.189.114.14 ~all"
},
{
"ttl": 3600,
"type": "SOA",
"rname": "dns.nic.ru",
"value": "ns3-l2.nic.ru"
},
{
"ttl": 3600,
"type": "A",
"value": "91.189.114.14"
}
] |
| Dns at | 2026-10-25T16:54:44Z |
| Jarm | 27d27d27d00027d00042d42d0000007d20e9b9a3e87aa1ec17cb4d646ce9a5 |
| Certificate | {
"san": [
"ge.agency",
"www.ge.agency"
],
"issuer": "Let's Encrypt / YE2",
"serial": "5afbc49b7e8ef7add74baa1eb4099a6b596",
"sha256": "5b82ec69618a8d8459f29ac87508cbc797820872a7b208b9c8af2c1c5cb29c49",
"subject": "ge.agency",
"valid_to": "2026-12-16T13:29:32Z",
"valid_from": "2026-09-17T13:29:33Z"
} |
| Registry data | {
"status": [
"client transfer prohibited"
],
"events": {
"expiration": "2027-07-15T21:00:00Z",
"last changed": "2026-08-19T11:39:50Z",
"registration": "2025-07-16T11:56:29Z",
"registrar expiration": "2027-07-15T21:00:00Z",
"last update of RDAP database": "2026-10-25T16:52:43Z"
},
"registrar": "Regional Network Information Center JSC dba RU-CENTER",
"registrar_iana_id": "463"
} |
Separate collector summary
This is a separate stored result. Its counts, vendors and dates do not replace the provider observation above. A retrieval date is not an analysis date.
- source
- VirusTotal
- scope
- unknown
- result_state
- null
- numerator
- 5
- denominator
- 89
- malicious
- null
- suspicious
- null
- vendors
- ["alphaMountain.ai","Chong Lua Dao","CRDF","Forcepoint ThreatSeeker","Gridinsoft"]
- observed_at
- null
- checked_at
- 2026-09-19 04:23:31
- fetched_at
- null
- time_basis
- as stored; legacy timezone not established
Microsoft
Cloudflare
Yandex
ESET
Bitdefender
Norton
Symantec
Avira
Avast / AVG
Kaspersky
Dr.Web
Netcraft
PhishTank
APWG eCX
PhishStats
Phish.Report
PolySwarm
CheckPhish
Quttera
Criminal IP
CRDF
Scamadviser
MyWOT
