duke-pristo.org

{
    "timeout": 0,
    "harmless": 44,
    "malicious": 14,
    "suspicious": 3,
    "undetected": 31
}

{
    "CRDF": "malicious",
    "DNS8": "suspicious",
    "ESET": "suspicious",
    "VIPRE": "malware",
    "G-Data": "phishing",
    "Lionic": "phishing",
    "Sophos": "phishing",
    "CyRadar": "phishing",
    "Webroot": "malicious",
    "Emsisoft": "malware",
    "Fortinet": "phishing",
    "SOCRadar": "phishing",
    "Seclookup": "malicious",
    "Gridinsoft": "suspicious",
    "BitDefender": "phishing",
    "alphaMountain.ai": "phishing",
    "Forcepoint ThreatSeeker": "phishing"
}

0

Dynadot Inc

2025-09-18T11:52:11Z

2027-09-18T11:52:11Z

2026-09-18T17:57:32Z

2025-09-18T12:47:27Z

[
    {
        "ttl": 3600,
        "type": "TXT",
        "value": "v=spf1 ip6:fdcf:abda:4154::/48 -all"
    },
    {
        "ttl": 3600,
        "type": "MX",
        "value": "park-mx.above.com",
        "priority": 10
    },
    {
        "ttl": 21600,
        "type": "NS",
        "value": "ns2.abovedomains.com"
    },
    {
        "ttl": 21600,
        "type": "NS",
        "value": "ns1.abovedomains.com"
    },
    {
        "ttl": 3600,
        "type": "SOA",
        "rname": "hostmaster.trellian.com",
        "value": "ns1.abovedomains.com"
    },
    {
        "ttl": 3600,
        "type": "A",
        "value": "103.224.212.141"
    }
]

2026-10-21T14:02:00Z

28d28d28d00028d00042d42d00000051af7d8070a18e002eaaedf620fa118c

{
    "san": [
        "*.118.getpharma.com",
        "*.2analyticspulse.buzz",
        "*.36ngame.com",
        "*.370913.cc",
        "*.58u11f.jstv2217.xyz",
        "*.87k.pw",
        "*.893175.mobi",
        "*.8m98hvv.jstv2217.xyz",
        "*.8tbuse1.jstv2217.xyz",
        "*.8xue8.com.cn"
    ],
    "issuer": "Let's Encrypt / YE2",
    "serial": "5d3c205ff6774c6cb88b877ad51ca6863d6",
    "sha256": "5c61e49437a2a50e50168a679ecc1e944336453b6a1affb29fc92d3849a87eb4",
    "subject": "getpharma.com",
    "valid_to": "2026-12-17T19:47:20Z",
    "valid_from": "2026-09-18T19:47:21Z"
}

{
    "registrar": "Dynadot Inc",
    "registrar_iana_id": "472",
    "registrar_url": "http://www.dynadot.com",
    "created": "2025-09-18T11:52:11Z",
    "updated": "2026-09-18T17:57:32Z",
    "expires": "2027-09-18T11:52:11Z",
    "status": [
        "autoRenewPeriod",
        "clientTransferProhibited"
    ],
    "nameservers": [
        "5014.ns1.abovedomains.com",
        "5014.ns2.abovedomains.com"
    ],
    "dnssec": "unsigned"
}

{
    "status": [
        "transfer prohibited"
    ],
    "events": {
        "expiration": "2026-09-18T11:52:11Z",
        "last changed": "2026-10-18T11:52:44Z",
        "registration": "2025-09-18T11:52:11Z",
        "registrar expiration": "2026-09-18T11:52:11Z",
        "last update of RDAP database": "2026-10-21T10:20:36Z"
    }
}

40412d76-33cc-491f-a837-ec4c146d6191

https://duke-pristo.org/

200

[
    {
        "url": "https://duke-pristo.org/",
        "status": 200
    }
]

f737d713dbf8c2aa26cc80eb4c4bbd657f709164e12199b75b72a4d0c4d8e763

3d712811971add75b9a1f81103799bb53a65e8afd4fb9e8122deadb4c7990d23

[
    "phishing"
]

[
    "Malware",
    "Security threats",
    "CIPA Filter",
    "CIPA"
]

{
    "bucket": ">200000"
}

[
    {
        "name": "duke-pristo.org",
        "type": "A",
        "value": "103.224.212.141"
    }
]

false

103.224.212.141

{
    "tags": [
        "malware"
    ],
    "malicious": true,
    "categories": [
        "malware"
    ]
}

{
    "registrar": "Dynadot Inc",
    "created": "2025-09-18T11:52:11Z",
    "updated": "2026-09-18T17:57:32Z",
    "expires": "2027-09-18T11:52:11Z",
    "nameservers": [
        "5014.ns1.abovedomains.com",
        "5014.ns2.abovedomains.com"
    ]
}

019fbc45-f5cf-77bb-a559-934bbb28658c

https://duke-pristo.org/

200

https-only

[
    {
        "to": "https://duke-pristo.org/",
        "from": "http://duke-pristo.org/",
        "status": 307
    }
]

188.114.97.3

[
    "fonts.gstatic.com",
    "db.onlinewebfonts.com",
    "fonts.googleapis.com",
    "ajax.googleapis.com",
    "ipinfo.io"
]

[
    "188.114.96.3",
    "142.250.154.94",
    "2a00:1450:4001:c15::5f",
    "2a00:1450:4001:c17::5f",
    "188.114.97.3"
]

[
    "13335",
    "15169"
]

[
    "US",
    "DE"
]

3d1d3c6667c7cf39194174baa8bd8f9d154691189c922ca527ef4a6a8a8ddd7c

[
    "11c19efe33fb100c4c87c44c823302f089fafe8f91ae762087370611946fa6ee",
    "37b38f6e8d74bbf51083ce962cb84f03ba6a6deea4bffe86e6f21569a5d5bed8"
]

[
    "$",
    "jQuery",
    "_0xb61b",
    "_0x4678",
    "consts",
    "api",
    "_locals",
    "getLang",
    "getRootPath",
    "getPagePath",
    "getCookie",
    "joinUrl",
    "realOff",
    "fmsUrl",
    "FireEvent",
    "fadeInOnScroll",
    "offset",
    "intlTelInputGlobals",
    "intlTelInput",
    "intlTelInputUtils",
    "setPhoneOk",
    "setPhoneErr",
    "setEmailOk",
    "setEmailErr",
    "setFNameOk",
    "setFNameErr",
    "setLNameOk",
    "setLNameErr",
    "setFormSending",
    "setFormSent",
    "getFormData",
    "scrollToElem",
    "routerClick",
    "changeLang",
    "investmentCalculator",
    "toggleHowTo",
    "toggleFree",
    "getDialCode",
    "searchParams",
    "ch"
]

[
    "diu"
]

[
    "uid",
    "openedAt",
    "referer",
    "offer"
]

{
    "san": [
        "duke-pristo.org",
        "*.duke-pristo.org"
    ],
    "cipher": "AES_128_GCM",
    "issuer": "WE1",
    "subject": "duke-pristo.org",
    "protocol": "QUIC",
    "valid_to": "2026-10-13T14:02:31Z",
    "valid_from": "2026-07-15T13:04:02Z"
}

316

316

16

90

57

{
    "engines": {
        "tags": [
            "urlscan-ml",
            "urlscan-ml-60c5e22"
        ],
        "score": 98,
        "malicious": true
    },
    "overall": {
        "score": 0,
        "malicious": false
    }
}

{
    "server": "cloudflare",
    "content-type": "text/html"
}