nt34[.]fun

This report analyzes the domain nt34.fun. The site presented an Apache2 Ubuntu Default Page with the text "It works," indicating it was a generic, non-functional landing page. Despite this benign appearance, the domain poses a significant threat, as it is flagged by multiple security vendors and appears on blocklists, suggesting it was likely prepared for or previously used in malicious activity such as phishing, malware distribution, or command-and-control operations.

Technical evidence shows the domain has a VirusTotal detection rate of 4 out of 95, flagged by Certego, CRDF, Gridinsoft, and SOCRadar. It is listed on 3 blocklists. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and created on 2026-01-01. It resolves to IP address 172.67.186.55 in the United States, hosted by AS13395 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1, and nameservers are liberty.ns.cloudflare.com and pete.ns.cloudflare.com. GridinSoft trust rating is 0 out of 100.

As of this report, the domain is down or offline. The risk level is high due to the combination of security vendor flags, blocklist presence, and zero trust rating. The site's inactive status does not reduce the threat, as it may be reactivated for malicious campaigns.