VirusTotal
18 / 92 engine detections · stored summary
打开报告VirusTotalOriginal source recordRetrieved: 16 fields
观察到: · Retrieved:
| Vendor result counts | {
"timeout": 0,
"harmless": 41,
"malicious": 13,
"suspicious": 5,
"undetected": 33
} |
|---|---|
| Vendor labels | {
"CRDF": "malicious",
"DNS8": "suspicious",
"ESET": "suspicious",
"VIPRE": "phishing",
"G-Data": "phishing",
"Lionic": "phishing",
"Sophos": "phishing",
"CyRadar": "phishing",
"Fortinet": "spam",
"PREBYTES": "suspicious",
"SOCRadar": "phishing",
"Kaspersky": "phishing",
"Seclookup": "malicious",
"Gridinsoft": "suspicious",
"BitDefender": "phishing",
"Chong Lua Dao": "malicious",
"alphaMountain.ai": "phishing",
"Forcepoint ThreatSeeker": "phishing"
} |
| Reputation | 0 |
| Tags | [
"dga"
] |
| Categories | {
"Google": "domain_parking",
"Sophos": "phishing and fraud",
"alphaMountain.ai": "Phishing, Newly Registered (alphaMountain.ai)"
} |
| 注册商 | Dynadot Inc |
| 创建 | 2026-08-08T02:05:30Z |
| Expires | 2027-08-08T02:05:30Z |
| Updated | 2026-08-13T12:27:50Z |
| 首次发现 | 2026-08-08T02:33:24Z |
| DNS 记录 | [
{
"ttl": 300,
"type": "MX",
"value": "parkmail.dynadot.com",
"priority": 0
},
{
"ttl": 300,
"type": "SOA",
"rname": "hostmaster.dynveheri.com",
"value": "ns1.dyna-ns.net"
},
{
"ttl": 300,
"type": "NS",
"value": "ns2.dyna-ns.net"
},
{
"ttl": 300,
"type": "NS",
"value": "ns1.dyna-ns.net"
},
{
"ttl": 300,
"type": "A",
"value": "158.94.210.119"
}
] |
| Dns at | 2026-10-20T12:08:31Z |
| Jarm | 40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319 |
| Certificate | {
"san": [
"dynveheri.com"
],
"issuer": "Let's Encrypt / YE1",
"serial": "5ae6adeff62e8688d3e61cc188045bd2de8",
"sha256": "0c43b38cc96e5584826e3b2fd061b160926202185c20ed745bff5eec3f0a83e9",
"subject": "dynveheri.com",
"valid_to": "2026-11-26T15:13:49Z",
"valid_from": "2026-08-28T15:13:50Z"
} |
| 注册记录 | {
"registrar": "Dynadot Inc",
"registrar_iana_id": "472",
"registrar_url": "http://www.dynadot.com",
"created": "2026-08-08T02:05:30Z",
"updated": "2026-08-13T12:27:50Z",
"expires": "2027-08-08T02:05:30Z",
"status": [
"clientTransferProhibited"
],
"nameservers": [
"ns1.dyna-ns.net",
"ns2.dyna-ns.net"
],
"dnssec": "unsigned"
} |
| Registry data | {
"status": [
"transfer prohibited"
],
"events": {
"expiration": "2027-08-08T02:05:30Z",
"last changed": "2026-08-28T10:16:34Z",
"registration": "2026-08-08T02:05:30Z",
"registrar expiration": "2027-08-08T02:05:30Z",
"last update of RDAP database": "2026-10-16T07:30:32Z"
}
} |
Separate source record · 13 malicious + 5 suspicious / 92 · 2026-10-20 12:03:10 UTC
The summary above and this provider record were collected at different times. Both remain available; malicious and suspicious classifications are shown separately.
- record_source
- collected_observations.vt
- analysis_at
- 2026-10-20T12:03:10Z
- fetched_at
- 2026-10-25T12:40:25Z
- stats
- {"timeout":0,"harmless":41,"malicious":13,"suspicious":5,"undetected":33}
