# pintucor.com – Non-profit organisation landing page | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/pintucor.com/
Machine-readable companion: https://phishdestroy.io/domain/pintucor.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-11-02 01:42:34 UTC
- Last availability or vendor check: 2026-11-02 01:42:34 UTC
- Stored record updated: 2026-11-02 04:30:13 UTC
- VirusTotal detections in the stored snapshot: 17/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean

## Stored infrastructure

- Observed IP address: 209.50.59.38
- Registrar in stored WHOIS data: GoDaddy.com, LLC
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2022-12-06 15:33:00 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a199ea-5390-7241-a6a4-3a91b6e02b24/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/pintucor.com
- Certificate Transparency search: https://crt.sh/?q=%25.pintucor.com
- Web Archive lookup: https://web.archive.org/web/*/https://pintucor.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

PhishDestroy describes pintucor.com as a non-profit education page inviting visitors to partner with the initiative.

The captured pintucor.com page presents itself as a non-profit education initiative, headlined "Education that opens doors." and tagged Non-profit, In development and Education. It lists what support makes possible — after-school learning centres, scholarships for first-generation learners, and digital classrooms — and offers a "Partner with us" button as the main interaction. A side panel shows a loading bar with the text "Getting everything ready before we open this space...", indicating the space is still being set up.

The stored VirusTotal domain result reports 17 detections out of 92 engines. DNS8 reported "suspicious"; ESET reported "phishing".
Package revision: 248e2e244ecebe899b3d3a1f87978adc24274c2fa40896f470b8fca0d5d44eaf
Text generated (not scan time): 2026-11-02 02:43:54
Reviewed evidence snapshot: {"domain":"pintucor.com","screenshot_available":true,"page_title":"pintucor.com – Non-profit organisation","virustotal":{"detections":17,"engines":92,"malicious":15,"suspicious":2,"retrieved_date":"2026-11-02","analysis_date":"2026-10-29","flagging_vendors":["DNS8","ESET","VIPRE","G-Data","Lionic","CyRadar","Webroot","Fortinet","SOCRadar","Kaspersky","Seclookup","Gridinsoft","SafeToOpen","BitDefender","Chong Lua Dao","alphaMountain.ai","Forcepoint ThreatSeeker"],"vendor_labels":{"DNS8":"suspicious","ESET":"phishing","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","SafeToOpen":"phishing","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"scope":"domain"},"capture_context":{"relationship":"screenshot associated with this domain record","captured_at":"2026-11-02T01:42:56Z","final_host":"pintucor.com","captured_on":"2026-11-02"},"plain_text_contract":1,"page_paragraph_target_words":95,"virustotal_public_summary":"The stored VirusTotal domain result reports 17 detections out of 92 engines. DNS8 reported \"suspicious\"; ESET reported \"phishing\".","page_paragraph_target_characters":518}
Source facts (timestamps as stored): {"record_id":1737515,"first_recorded_at":"2026-11-02 02:42:34","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":17,"denominator":92,"malicious":15,"suspicious":2,"vendors":{"DNS8":"suspicious","ESET":"phishing","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","SafeToOpen":"phishing","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-29T03:38:46Z","checked_at":"2026-11-02 02:42:51","fetched_at":"2026-11-02T01:42:51Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":17,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","Chong Lua Dao","CyRadar","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","Lionic","SafeToOpen","Seclookup","SOCRadar","VIPRE","Webroot"],"observed_at":"2026-10-29 03:38:46","checked_at":"2026-11-02 02:42:51","fetched_at":"2026-11-02 01:42:52","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-02 02:42:53"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-02 04:30:18"},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-11-02 02:42:34"}}

## Stored page captures

- URLScan · 2026-11-02: https://screenshots.phishdestroy.io/us/01a199ea-5390-7241-a6a4-3a91b6e02b24.png
  Captured: 2026-11-02 01:40:38 UTC
  Source report: https://urlscan.io/result/01a199ea-5390-7241-a6a4-3a91b6e02b24/
  SHA-256: 846474b002875a2326de6afd3c9c9f0f0d135d23146e38e3f277bd055cfb8b0f
- URLScan · 2026-05-29: https://screenshots.phishdestroy.io/us/019e7403-dd14-748f-874a-a9f6f27ffed1.png
  Captured: 2026-05-29 13:54:37 UTC
  Source report: https://urlscan.io/result/019e7403-dd14-748f-874a-a9f6f27ffed1/
  SHA-256: 4a4697f6bf8e04eb88f48727552946ca2b9bcdefa0f2c9f52a4823fcfc85fe32
- URLScan · 2026-05-29: https://screenshots.phishdestroy.io/us/019e74ae-9c5c-73fe-9c37-852b12536c7a.png
  Captured: 2026-05-29 17:01:09 UTC
  Source report: https://urlscan.io/result/019e74ae-9c5c-73fe-9c37-852b12536c7a/
  SHA-256: 65e5c2f6ec1d635ab26bda0d792bb10d355abdd8af7e60f5235387733c973088
- URLScan · 2026-05-29: https://screenshots.phishdestroy.io/us/019e74c8-c71d-705b-88f9-c7e87b6713f0.png
  Captured: 2026-05-29 17:29:41 UTC
  Source report: https://urlscan.io/result/019e74c8-c71d-705b-88f9-c7e87b6713f0/
  SHA-256: 4a4697f6bf8e04eb88f48727552946ca2b9bcdefa0f2c9f52a4823fcfc85fe32
- URLScan · 2026-05-29: https://screenshots.phishdestroy.io/us/019e74d1-8948-756e-99bd-ce3983fc2d99.png
  Captured: 2026-05-29 17:39:17 UTC
  Source report: https://urlscan.io/result/019e74d1-8948-756e-99bd-ce3983fc2d99/
  SHA-256: 78cec0e2b86de8a0778b84eb01a47ed4ddcac42088a7b9679765dfbc2524a595
- URLScan · 2026-06-11: https://screenshots.phishdestroy.io/us/019eb61b-cb3d-7068-a0c2-70f0ff429981.png
  Captured: 2026-06-11 09:55:43 UTC
  Source report: https://urlscan.io/result/019eb61b-cb3d-7068-a0c2-70f0ff429981/
  SHA-256: 4a4697f6bf8e04eb88f48727552946ca2b9bcdefa0f2c9f52a4823fcfc85fe32
- URLScan · 2026-07-02: https://screenshots.phishdestroy.io/us/019f22c9-69cd-771b-aa6b-c6f7a25dacd5.png
  Captured: 2026-07-02 12:24:19 UTC
  Source report: https://urlscan.io/result/019f22c9-69cd-771b-aa6b-c6f7a25dacd5/
  SHA-256: 9d6033fea6cf942e6efa5f6bba7d3bdf0b912e081993190a40db9c6701213140
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/3fefd2fb-4a3a-4a4a-8791-53a6b921d610.png
  Captured: 2026-11-02 01:42:56 UTC
  Source report: https://radar.cloudflare.com/scan/3fefd2fb-4a3a-4a4a-8791-53a6b921d610
  SHA-256: 4032f7752239fda4c8cba0a0998b358d1dbe7946361c45ca8607bbee4c7f6e76

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-11-02T01:43:07Z",
        "uuid": "01a199ea-5390-7241-a6a4-3a91b6e02b24",
        "scanned_at": "2026-11-02T01:40:38Z",
        "final_url": "https://pintucor.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://pintucor.com/",
                "from": "http://pintucor.com/",
                "status": 307
            }
        ],
        "ip": "209.50.59.38",
        "ptr": "209-50-59-38.us-chi1.upcloud.host",
        "domains": [
            "fonts.gstatic.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "142.251.20.94",
            "2a00:1450:4001:c0f::5f",
            "209.50.59.38"
        ],
        "asns": [
            "15169",
            "25697"
        ],
        "countries": [
            "US",
            "DE"
        ],
        "doc_hash": "2f925d169200445977fc597ede89ebdce890505a228691ed0ce43f68e511098e",
        "tls": {
            "san": [
                "pintucor.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "ZeroSSL ECC DV SSL CA 2",
            "subject": "pintucor.com",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-07T23:59:59Z",
            "valid_from": "2026-10-09T00:00:00Z"
        },
        "domain_age_days": 1356,
        "apex_age_days": 1356,
        "tls_age_days": 24,
        "tls_valid_days": 90,
        "requests": 7,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 60,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=UTF-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-11-02T01:43:12Z",
        "uuid": "3fefd2fb-4a3a-4a4a-8791-53a6b921d610",
        "scanned_at": "2026-11-02T01:42:56Z",
        "final_url": "https://pintucor.com/",
        "status": 200,
        "history": [
            {
                "url": "https://pintucor.com/",
                "status": 200
            }
        ],
        "dom_hash": "d253745f968e4c060a9c74fe8a8bf677a41745b4417f84e80efe03f3d0cdbfc0",
        "doc_hash": "f6517044345a41827ca667e73c960e4beb7f2e9b0a93782b4ccc1b292d3217ea",
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "pintucor.com",
                "type": "A",
                "value": "209.50.59.38"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.5",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "GoDaddy.com, LLC",
            "created": "2022-12-06T16:33:00Z",
            "updated": "2025-12-14T18:22:40Z",
            "expires": "2026-12-06T16:33:00Z",
            "nameservers": [
                "ns1.mysecurecloudhost.com",
                "ns2.mysecurecloudhost.com",
                "ns3.mysecurecloudhost.com",
                "ns4.mysecurecloudhost.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-11-02T01:42:51Z",
        "analysis_at": "2026-10-29T03:38:46Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 15,
            "suspicious": 2,
            "undetected": 31
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "phishing",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "SafeToOpen": "phishing",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "Webroot": "Phishing and Other Frauds",
            "alphaMountain.ai": "Phishing (alphaMountain.ai)",
            "Forcepoint ThreatSeeker": "phishing and other frauds"
        },
        "popularity": {
            "Cisco Umbrella": 799389
        },
        "registrar": "GoDaddy.com, LLC",
        "created": "2022-12-06T16:33:00Z",
        "expires": "2026-12-06T16:33:00Z",
        "updated": "2025-12-14T18:22:40Z",
        "first_seen": "2024-04-06T03:43:32Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns4.121webhosting.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns2.121webhosting.com"
            },
            {
                "ttl": 7200,
                "type": "MX",
                "value": "pintucor.com",
                "priority": 0
            },
            {
                "ttl": 7200,
                "type": "A",
                "value": "209.50.59.38"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns1.121webhosting.com"
            },
            {
                "ttl": 7200,
                "type": "TXT",
                "value": "v=spf1 +a +mx +ip4:69.72.248.157 include:spf.mysecurecloudhost.com ~all"
            },
            {
                "ttl": 21600,
                "type": "SOA",
                "rname": "servers.mysecurecloudhost.com",
                "value": "ns1.121webhosting.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns3.121webhosting.com"
            }
        ],
        "dns_at": "2026-10-29T03:39:00Z",
        "jarm": "40d40d40d00000000043d40d40d43da936ab0256fab25eca082941d14e3ece",
        "cert": {
            "san": [
                "pintucor.com"
            ],
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "serial": "7f0ebe1a13327dac7a5fabe56d3e5238",
            "sha256": "368edd51d7a3c9cd33ec3119b8b28bb729e586af548db79f826e490d090e10e9",
            "subject": "pintucor.com",
            "valid_to": "2027-01-07T23:59:59Z",
            "valid_from": "2026-10-09T00:00:00Z"
        },
        "whois": {
            "registrar": "GoDaddy.com, LLC",
            "registrar_iana_id": "146",
            "registrar_url": "http://www.godaddy.com",
            "created": "2022-12-06T16:33:00Z",
            "updated": "2025-12-14T18:22:40Z",
            "expires": "2026-12-06T16:33:00Z",
            "status": [
                "clientDeleteProhibited",
                "clientRenewProhibited",
                "clientTransferProhibited",
                "clientUpdateProhibited"
            ],
            "nameservers": [
                "ns1.mysecurecloudhost.com",
                "ns2.mysecurecloudhost.com",
                "ns3.mysecurecloudhost.com",
                "ns4.mysecurecloudhost.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client delete prohibited",
                "client renew prohibited",
                "client transfer prohibited",
                "client update prohibited"
            ],
            "events": {
                "expiration": "2026-12-06T16:33:00Z",
                "last changed": "2025-12-14T18:22:40Z",
                "registration": "2022-12-06T16:33:00Z",
                "last update of RDAP database": "2026-10-23T06:16:35Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-11-02T01:43:22Z",
        "mail_config": {
            "mx": [
                "pintucor.com"
            ],
            "spf": "v=spf1 +a +mx +ip4:69.72.248.157 include:spf.mysecurecloudhost.com ~all",
            "dkim": [
                "default"
            ],
            "dmarc": true,
            "dkim_bits": 2048,
            "spf_lookups": 5
        },
        "caa_records": {
            "domain": "pintucor.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-23T15:26:24Z",
            "first": "2011-02-07T16:49:19Z",
            "changes": 15,
            "days_archived": 17,
            "scans_per_day": 0,
            "avg_page_bytes": 12045
        },
        "social_tags": {
            "title": "pintucor.com – Non-profit organisation"
        },
        "trackers": {
            "requests": 5,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 28,
                "tls": 126,
                "wait": 126,
                "connect": 123,
                "download": 121
            },
            "response_ms": 524
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "ocsp_stapled": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 14943,
            "co2_grams": 0.0005,
            "cleaner_than": 63
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "76.223.26.245",
                    "host": "ns3.121webhosting.com"
                },
                {
                    "ip": "13.248.158.180",
                    "host": "ns1.121webhosting.com"
                },
                {
                    "ip": "99.83.147.209",
                    "host": "ns4.121webhosting.com"
                },
                {
                    "ip": "75.2.118.134",
                    "host": "ns2.121webhosting.com"
                }
            ],
            "zone": "pintucor.com"
        },
        "location": {
            "ip": "209.50.59.38",
            "asn": "25697",
            "org": "UpCloud USA Inc",
            "city": "Phoenix",
            "country": "US"
        },
        "ssl": {
            "issuer": "ZeroSSL GmbH / ZeroSSL ECC DV SSL CA 2",
            "subject": "pintucor.com"
        },
        "dns": {
            "A": [
                "209.50.59.38"
            ],
            "MX": [
                "{\"exchange\": \"pintucor.com\", \"priority\": 0}"
            ],
            "NS": [
                "ns1.121webhosting.com",
                "ns4.121webhosting.com",
                "ns3.121webhosting.com",
                "ns2.121webhosting.com"
            ],
            "SOA": "{\"nsname\": \"ns1.121webhosting.com\", \"hostmaster\": \"servers.mysecurecloudhost.com\", \"serial\": 2026080606, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}",
            "TXT": [
                "v=spf1 +a +mx +ip4:69.72.248.157 include:spf.mysecurecloudhost.com ~all"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "209.50.59.38",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://pintucor.com"
            ]
        },
        "subdomains": {
            "count": 8,
            "subdomains": [
                "autodiscover.pintucor.com",
                "cpanel.pintucor.com",
                "cpcalendars.pintucor.com",
                "cpcontacts.pintucor.com",
                "mail.pintucor.com",
                "webdisk.pintucor.com",
                "webmail.pintucor.com",
                "www.pintucor.com"
            ]
        },
        "whois": {
            "registrar": "GoDaddy.com, LLC",
            "created": "2022-12-06T16:33:00Z",
            "updated": "2025-12-14T18:22:40Z",
            "expires": "2026-12-06T16:33:00Z",
            "status": [
                "clientDeleteProhibited https://icann.org/epp",
                "clientRenewProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp",
                "clientUpdateProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.mysecurecloudhost.com",
                "ns2.mysecurecloudhost.com",
                "ns3.mysecurecloudhost.com",
                "ns4.mysecurecloudhost.com"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=UTF-8"
            }
        }
    }
}
```
Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/cf/3fefd2fb-4a3a-4a4a-8791-53a6b921d610.png","source":"Cloudflare Radar","report_url":"https://radar.cloudflare.com/scan/3fefd2fb-4a3a-4a4a-8791-53a6b921d610","captured_at":"2026-11-02T01:42:56Z","sha256":"4032f7752239fda4c8cba0a0998b358d1dbe7946361c45ca8607bbee4c7f6e76","model_image_sha256":"9ad35a1b32ae68b353807b61d796b3cafacb0f1b325d6c16623254939d703f82","available":true}