VirusTotal
2 / 92 engine detections
VirusTotalOriginal source recordObserved: 12 fields
Observed: · Retrieved:
Vendor result counts
- Timeout
- 0
- Harmless
- 56
- Malicious
- 1
- Suspicious
- 1
- Undetected
- 34
Vendor labels
- SOCRadar
- phishing
- Gridinsoft
- suspicious
Reputation score
0Categories
- Sophos
- phishing and fraud
- Webroot
- Phishing and Other Frauds
- alphaMountain.ai
- Phishing (alphaMountain.ai)
Created
Updated
First seen
DNS records
- TTL, seconds
- 3600
- Type
- SOA
- Responsible mailbox
- hostmaster.trellian.com
- Value
- ns1.abovedomains.com
- TTL, seconds
- 3600
- Type
- TXT
- Value
- v=spf1 ip6:fdcf:abda:4154::/48 -all
- TTL, seconds
- 3600
- Type
- MX
- Value
- park-mx.above.com
- Priority
- 10
- TTL, seconds
- 21600
- Type
- NS
- Value
- ns2.abovedomains.com
- TTL, seconds
- 3600
- Type
- A
- Value
- 103.224.212.141
- TTL, seconds
- 21600
- Type
- NS
- Value
- ns1.abovedomains.com
DNS records observed
JARM fingerprint
28d28d28d00028d00042d42d00000051af7d8070a18e002eaaedf620fa118cCertificate
- Subject alternative names
- *.2025vortexhub.sbs
- *.27705118.vip
- *.6868999.com
- *.admin.freeflashgames.it
- *.admin.jet-casino-zahorovod3.top
- *.altima77.net
- *.analytic.freeflashgames.it
- *.app.freeflashgames.it
- *.assertiveadventures.biz
- *.authentictraveledge.store
- Issuer
- Let's Encrypt / YE2
- Serial
- 58657a443b71090347cf63be06961687a73
- SHA-256
- 1214533bba960cf27e44402317fca73760a940afd80b9c87cdaa7a11651e4fc9
- Subject
- kerja.website
- Valid until
- Valid from
Registry data (RDAP)
- Status
- transfer prohibited
- Registry events
- Expiration
- Last changed
- Registration
- Registrar expiration
- Last RDAP database update
- Registrar
- DYNADOT LLC
- Registrar IANA ID
- 472
Original source fields · JSON
| Vendor result counts | {
"timeout": 0,
"harmless": 56,
"malicious": 1,
"suspicious": 1,
"undetected": 34
} |
|---|---|
| Vendor labels | {
"SOCRadar": "phishing",
"Gridinsoft": "suspicious"
} |
| Reputation | 0 |
| Categories | {
"Sophos": "phishing and fraud",
"Webroot": "Phishing and Other Frauds",
"alphaMountain.ai": "Phishing (alphaMountain.ai)"
} |
| Created | 2025-10-28T00:00:00Z |
| Updated | 2025-10-28T00:00:00Z |
| First seen | 2025-10-28T22:28:25Z |
| DNS records | [
{
"ttl": 3600,
"type": "SOA",
"rname": "hostmaster.trellian.com",
"value": "ns1.abovedomains.com"
},
{
"ttl": 3600,
"type": "TXT",
"value": "v=spf1 ip6:fdcf:abda:4154::/48 -all"
},
{
"ttl": 3600,
"type": "MX",
"value": "park-mx.above.com",
"priority": 10
},
{
"ttl": 21600,
"type": "NS",
"value": "ns2.abovedomains.com"
},
{
"ttl": 3600,
"type": "A",
"value": "103.224.212.141"
},
{
"ttl": 21600,
"type": "NS",
"value": "ns1.abovedomains.com"
}
] |
| Dns at | 2026-10-30T03:02:01Z |
| Jarm | 28d28d28d00028d00042d42d00000051af7d8070a18e002eaaedf620fa118c |
| Certificate | {
"san": [
"*.2025vortexhub.sbs",
"*.27705118.vip",
"*.6868999.com",
"*.admin.freeflashgames.it",
"*.admin.jet-casino-zahorovod3.top",
"*.altima77.net",
"*.analytic.freeflashgames.it",
"*.app.freeflashgames.it",
"*.assertiveadventures.biz",
"*.authentictraveledge.store"
],
"issuer": "Let's Encrypt / YE2",
"serial": "58657a443b71090347cf63be06961687a73",
"sha256": "1214533bba960cf27e44402317fca73760a940afd80b9c87cdaa7a11651e4fc9",
"subject": "kerja.website",
"valid_to": "2027-01-27T02:17:23Z",
"valid_from": "2026-10-29T02:17:24Z"
} |
| Registry data | {
"status": [
"transfer prohibited"
],
"events": {
"expiration": "2026-10-28T22:11:38Z",
"last changed": "2026-10-29T01:06:07Z",
"registration": "2025-10-28T22:11:38Z",
"registrar expiration": "2026-10-28T22:11:38Z",
"last update of RDAP database": "2026-10-29T17:17:05Z"
},
"registrar": "DYNADOT LLC",
"registrar_iana_id": "472"
} |
Separate collector summary
This is a separate stored result. Its counts, vendors and dates do not replace the provider observation above. A retrieval date is not an analysis date.
- source
- VirusTotal
- scope
- unknown
- result_state
- observed
- numerator
- 18
- denominator
- 92
- malicious
- null
- suspicious
- null
- vendors
- ["ADMINUSLabs","alphaMountain.ai","BitDefender","Chong Lua Dao","CyRadar","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","Lionic","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"]
- observed_at
- null
- checked_at
- 2026-11-05 04:04:39
- fetched_at
- 2026-11-05 03:04:40
- time_basis
- as stored; legacy timezone not established