VirusTotal
16 / 92 发动机检测 · 存储的摘要
打开报告VirusTotal来源原始记录观测时间: 11 个字段
观测时间: · 检索到:
供应商结果计数
- 超时
- 0
- 无害
- 45
- 恶意
- 14
- 可疑的
- 2
- 未检测到
- 31
供应商标签
- DNS8
- suspicious
- ESET
- suspicious
- VIPRE
- phishing
- G-Data
- phishing
- Lionic
- phishing
- Sophos
- phishing
- CyRadar
- phishing
- Webroot
- malicious
- Fortinet
- phishing
- SOCRadar
- phishing
- 卡巴斯基
- phishing
- Seclookup
- malicious
- Gridinsoft
- phishing
- BitDefender
- phishing
- alphaMountain.ai
- phishing
- Forcepoint ThreatSeeker
- phishing
信誉评分
0创建
已更新
首次发现
DNS 记录
- TTL(秒)
- 900
- 类型
- MX
- 值
- gourmeland.com
- 优先级
- 0
- TTL(秒)
- 900
- 类型
- NS
- 值
- ns1.hosting.com.tr
- TTL(秒)
- 900
- 类型
- TXT
- 值
- v=spf1 ip4:77.245.159.85 include:_spf.hosting.com.tr -all
- TTL(秒)
- 900
- 类型
- A
- 值
- 159.203.146.164
- TTL(秒)
- 900
- 类型
- SOA
- 负责人邮箱
- noc.hosting.com.tr
- 值
- ns1.hosting.com.tr
- TTL(秒)
- 900
- 类型
- NS
- 值
- ns2.hosting.com.tr
DNS 记录获取时间
JARM 指纹
29d29d00029d29d00042d42d00000023f2ae7180b8a0816654f2296c007d93证书
- 使用者备用名称(SAN)
- ingress.local
- 签发者
- Acme Co / Kubernetes Ingress Controller Fake Certificate
- 序列号
- ae970d44c133efc7f8d556d647f62e31
- SHA-256
- 156b884e2de067204c9f6ba8f282391992d5a08e119c5e5a732bab1726080749
- 使用者(Subject)
- Kubernetes Ingress Controller Fake Certificate
- 到期时间
- 生效时间
注册局数据(RDAP)
- 状态
- client transfer prohibited
- 注册局事件
- 注册到期
- 最后更改
- 注册信息
- 注册商处到期
- RDAP 数据库最近更新
- 注册商
- REALTIME REGISTER B.V.
- 注册商 IANA ID
- 839
来源原始字段 · JSON
| 供应商结果计数 | {
"timeout": 0,
"harmless": 45,
"malicious": 14,
"suspicious": 2,
"undetected": 31
} |
|---|---|
| 供应商标签 | {
"DNS8": "suspicious",
"ESET": "suspicious",
"VIPRE": "phishing",
"G-Data": "phishing",
"Lionic": "phishing",
"Sophos": "phishing",
"CyRadar": "phishing",
"Webroot": "malicious",
"Fortinet": "phishing",
"SOCRadar": "phishing",
"Kaspersky": "phishing",
"Seclookup": "malicious",
"Gridinsoft": "phishing",
"BitDefender": "phishing",
"alphaMountain.ai": "phishing",
"Forcepoint ThreatSeeker": "phishing"
} |
| 声誉 | 0 |
| 创建 | 2025-10-09T00:00:00Z |
| 已更新 | 2025-10-09T00:00:00Z |
| 首次发现 | 2025-10-12T16:02:42Z |
| DNS 记录 | [
{
"ttl": 900,
"type": "MX",
"value": "gourmeland.com",
"priority": 0
},
{
"ttl": 900,
"type": "NS",
"value": "ns1.hosting.com.tr"
},
{
"ttl": 900,
"type": "TXT",
"value": "v=spf1 ip4:77.245.159.85 include:_spf.hosting.com.tr -all"
},
{
"ttl": 900,
"type": "A",
"value": "159.203.146.164"
},
{
"ttl": 900,
"type": "SOA",
"rname": "noc.hosting.com.tr",
"value": "ns1.hosting.com.tr"
},
{
"ttl": 900,
"type": "NS",
"value": "ns2.hosting.com.tr"
}
] |
| Dns at | 2026-10-27T09:15:29Z |
| Jarm | 29d29d00029d29d00042d42d00000023f2ae7180b8a0816654f2296c007d93 |
| 证书 | {
"san": [
"ingress.local"
],
"issuer": "Acme Co / Kubernetes Ingress Controller Fake Certificate",
"serial": "ae970d44c133efc7f8d556d647f62e31",
"sha256": "156b884e2de067204c9f6ba8f282391992d5a08e119c5e5a732bab1726080749",
"subject": "Kubernetes Ingress Controller Fake Certificate",
"valid_to": "2027-07-10T23:29:09Z",
"valid_from": "2026-07-10T23:29:09Z"
} |
| 注册表数据 | {
"status": [
"client transfer prohibited"
],
"events": {
"expiration": "2027-10-09T10:19:55Z",
"last changed": "2026-10-08T05:44:05Z",
"registration": "2025-10-09T10:19:55Z",
"registrar expiration": "2027-10-09T10:19:55Z",
"last update of RDAP database": "2026-10-27T09:15:29Z"
},
"registrar": "REALTIME REGISTER B.V.",
"registrar_iana_id": "839"
} |
单独的源记录 · 14 malicious + 2 suspicious / 92 · 2026-10-27 09:09:38 UTC
上述摘要和此服务提供商记录是在不同时间收集的。两者均仍可查阅;恶意和可疑的分类结果分别显示。
- record_source
- collected_observations.vt
- analysis_at
- 2026-10-27T09:09:38Z
- fetched_at
- 2026-10-28T00:46:23Z
- stats
- {"timeout":0,"harmless":45,"malicious":14,"suspicious":2,"undetected":31}
