Verdict
duckingproxy.eu shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | A minimal parked domain page stating the domain may be for sale, with links to Terms of Service and Privacy Policy. No products, services, login, or transactional flows present. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 12 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 8.3 years oldRegistered history | Clear |
| Web archive | Archived since 2017Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2017.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website is a minimal parked-domain page for duckingproxy.eu that states the domain may be for sale and directs visitors to Terms of Service, Privacy Policy, and an inquiry option; it presents no operating business, products, services, login capability, or transaction flow.
Scam/Impersonation Risk
Confirmed external contradiction signals materially outweigh the benign appearance of the parked page. The domain is blacklisted, and multiple independent security detections classify it as malicious or suspicious. The page itself does not display a login form, financial workflow, phishing content, or a suspected brand impersonation, so the evidence does not establish a specific active scam mechanism on the captured page; however, the confirmed blacklist status and malicious detections justify treating sensitive interaction with the domain as unsafe. No identity contradiction between distinct legal-entity names was observed.
- Independent security telemetry recorded 12 malicious detections and 1 suspicious detection for the domain; Fortinet, Kaspersky, and Sophos were among the flagged vendors.
- The domain is listed by external blacklist sources, while Google Safe Browsing reported no malicious result in the supplied assessment.
- The homepage is a 212-character parked-domain page with no login form, hidden form, sensitive form, wallet connection, or external submission flow.
- Domain continuity data records an age of 8.353182751540041 years, with first archival observation on 2017-11-17T11:11:36Z and latest observation on 2026-05-17T06:27:36Z; the structured archive record contains 70 snapshots across 10 years.
Regulatory Verification Notes
The available legal material consists of links to Terms of Service and Privacy Policy on a domain-sale landing page; it does not provide a clearly identified operating entity, licensing authority, or license number. This is a substantial disclosure and governance gap for any proposed commercial or financial relationship, while the site's actual captured business model is domain parking rather than a regulated service. The registrar is Registrar.eu, but that administrative fact does not independently verify the operator or the legitimacy of any future use of the domain. No matching third-party broker profile was identified.
- The homepage presents only a domain-sale statement, an inquiry call-to-action, and links to Terms of Service and Privacy Policy.
- No operator name, corporate registration detail, regulatory authority, or license number is disclosed in the captured page content.
- The domain is registered through Registrar.eu.
- Hosting telemetry identifies AS133618, TRELLIAN-AS-AP — Trellian Pty. Limited, AU; the site uses a DV TLS certificate issued by YR1, valid to 2026-10-06T02:18:58+00:00.
What to Verify Next
Before any future engagement, the proposed operator should be identified independently and any claimed business activity should be checked against the relevant corporate and regulatory registers. The official support and contact channels should be confirmed through an independent, offline route, and any payment, credential, download, or redirection request should be assessed only after the domain's status has been revalidated by the responsible security team.
- The Terms of Service and Privacy Policy are the only identified legal-document entry points on the homepage.
- The captured site contains no account, payment, download, or transactional workflow requiring immediate validation.
- The domain-sale inquiry function should be matched to independently verified ownership before commercial engagement.
Summary Verdict
The overall posture is critical trust risk with an unverified real-world operator identity. The available evidence does not support treating the domain as suitable for sensitive interaction, despite the absence of an active service flow on the captured page.
Infrastructure Integrity
The site resolves directly to one likely origin IP, 103.224.182.244, with no detected CDN or WAF and no edge-IP layer. It is hosted by TRELLIAN-AS-AP — Trellian Pty. Limited, AU, on AS133618; the valid DV TLS certificate provides transport encryption only and is not evidence of operator legitimacy.
Closing Assessment
The domain should remain outside credential, financial, download, and other sensitive workflows unless and until its ownership, intended use, and current security reputation have been independently re-established.
Written analysis generated 2026-08-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of duckingproxy.eu.
- The request stayed on duckingproxy.eu. It was not redirected to another domain. Clear
- Registration is published under Registrar.eu. Clear
- DNS for this domain is served by eu for more info.. Noted
- The earliest public archive of this site is from 2017-11-17. Clear
- It is hosted on TRELLIAN-AS-AP, from a server in AU. Noted
Domain intelligence
| Registrar | Registrar.eu |
|---|---|
| Hosting | TRELLIAN-AS-AP - Trellian Pty. Limited, AU |
| Country | AU |
| Server IP | 103.224.182.244 |
| Name servers | 5296.ns2.abovedomains.com 5296.ns1.abovedomains.com Please visit www.eurid.eu for more info. |
| SSL issuer | YR1 |
| SSL expiry | 2026-10-06 |
| Domain age | 8.35 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2017-11-17 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 12 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about duckingproxy.eu at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.