VirusTotal
16 / 92 发动机检测 · 存储的摘要
打开报告VirusTotal来源原始记录观测时间: 12 个字段
观测时间: · 检索到:
供应商结果计数
- 超时
- 0
- 无害
- 44
- 恶意
- 13
- 可疑的
- 3
- 未检测到
- 32
供应商标签
- DNS8
- suspicious
- ESET
- suspicious
- VIPRE
- phishing
- G-Data
- phishing
- Lionic
- phishing
- Sophos
- phishing
- CyRadar
- phishing
- Webroot
- malicious
- Fortinet
- phishing
- SOCRadar
- phishing
- 卡巴斯基
- phishing
- Seclookup
- malicious
- Gridinsoft
- suspicious
- BitDefender
- phishing
- alphaMountain.ai
- phishing
- Forcepoint ThreatSeeker
- phishing
信誉评分
0标签
- dga
创建
已更新
首次发现
DNS 记录
- TTL(秒)
- 900
- 类型
- NS
- 值
- ns1.hosting.com.tr
- TTL(秒)
- 900
- 类型
- MX
- 值
- fvriovipsecret.com
- 优先级
- 0
- TTL(秒)
- 900
- 类型
- TXT
- 值
- v=spf1 ip4:77.245.159.85 include:_spf.hosting.com.tr -all
- TTL(秒)
- 900
- 类型
- NS
- 值
- ns2.hosting.com.tr
- TTL(秒)
- 900
- 类型
- SOA
- 负责人邮箱
- noc.hosting.com.tr
- 值
- ns1.hosting.com.tr
- TTL(秒)
- 900
- 类型
- A
- 值
- 159.203.148.145
DNS 记录获取时间
JARM 指纹
28d28d28d00028d00042d42d000000e1ea2a807a629b496b664cf07ad7c08d证书
- 使用者备用名称(SAN)
- fvriovipsecret.com
- 签发者
- Let's Encrypt / YE1
- 序列号
- 5c323900a55c60d52160ebd896d64764445
- SHA-256
- 1c6e4d670bc07664268f45a05c9268dae75f6e6038b51d860532848c34d7665b
- 使用者(Subject)
- fvriovipsecret.com
- 到期时间
- 生效时间
注册局数据(RDAP)
- 状态
- client transfer prohibited
- 注册局事件
- 注册到期
- 最后更改
- 注册信息
- 注册商处到期
- RDAP 数据库最近更新
- 注册商
- REALTIME REGISTER B.V.
- 注册商 IANA ID
- 839
来源原始字段 · JSON
| 供应商结果计数 | {
"timeout": 0,
"harmless": 44,
"malicious": 13,
"suspicious": 3,
"undetected": 32
} |
|---|---|
| 供应商标签 | {
"DNS8": "suspicious",
"ESET": "suspicious",
"VIPRE": "phishing",
"G-Data": "phishing",
"Lionic": "phishing",
"Sophos": "phishing",
"CyRadar": "phishing",
"Webroot": "malicious",
"Fortinet": "phishing",
"SOCRadar": "phishing",
"Kaspersky": "phishing",
"Seclookup": "malicious",
"Gridinsoft": "suspicious",
"BitDefender": "phishing",
"alphaMountain.ai": "phishing",
"Forcepoint ThreatSeeker": "phishing"
} |
| 声誉 | 0 |
| 标签 | [
"dga"
] |
| 创建 | 2026-01-19T00:00:00Z |
| 已更新 | 2026-01-19T00:00:00Z |
| 首次发现 | 2026-01-22T16:08:15Z |
| DNS 记录 | [
{
"ttl": 900,
"type": "NS",
"value": "ns1.hosting.com.tr"
},
{
"ttl": 900,
"type": "MX",
"value": "fvriovipsecret.com",
"priority": 0
},
{
"ttl": 900,
"type": "TXT",
"value": "v=spf1 ip4:77.245.159.85 include:_spf.hosting.com.tr -all"
},
{
"ttl": 900,
"type": "NS",
"value": "ns2.hosting.com.tr"
},
{
"ttl": 900,
"type": "SOA",
"rname": "noc.hosting.com.tr",
"value": "ns1.hosting.com.tr"
},
{
"ttl": 900,
"type": "A",
"value": "159.203.148.145"
}
] |
| Dns at | 2026-10-20T06:00:01Z |
| Jarm | 28d28d28d00028d00042d42d000000e1ea2a807a629b496b664cf07ad7c08d |
| 证书 | {
"san": [
"fvriovipsecret.com"
],
"issuer": "Let's Encrypt / YE1",
"serial": "5c323900a55c60d52160ebd896d64764445",
"sha256": "1c6e4d670bc07664268f45a05c9268dae75f6e6038b51d860532848c34d7665b",
"subject": "fvriovipsecret.com",
"valid_to": "2026-09-18T06:45:12Z",
"valid_from": "2026-06-20T06:45:13Z"
} |
| 注册表数据 | {
"status": [
"client transfer prohibited"
],
"events": {
"expiration": "2027-01-19T10:19:05Z",
"last changed": "2026-01-24T10:19:05Z",
"registration": "2026-01-19T10:19:05Z",
"registrar expiration": "2027-01-19T10:19:05Z",
"last update of RDAP database": "2026-10-19T05:55:18Z"
},
"registrar": "REALTIME REGISTER B.V.",
"registrar_iana_id": "839"
} |
单独的源记录 · 13 malicious + 3 suspicious / 92 · 2026-10-20 05:54:35 UTC
上述摘要和此服务提供商记录是在不同时间收集的。两者均仍可查阅;恶意和可疑的分类结果分别显示。
- record_source
- collected_observations.vt
- analysis_at
- 2026-10-20T05:54:35Z
- fetched_at
- 2026-10-27T20:57:06Z
- stats
- {"timeout":0,"harmless":44,"malicious":13,"suspicious":3,"undetected":32}
