rnut[.]digital

This report analyzes the domain rnut.digital, which is currently offline and presents a high risk based on available threat intelligence. The site's purpose cannot be determined from the provided data, as no page title or content is available. Its presence on threat detection lists and zero trust score strongly indicate it was registered for malicious activity, likely phishing, malware distribution, or fraud.

Technical analysis reveals significant indicators of malicious intent. The domain was created on 2025-12-10, registered through Global Domain Group LLC, and resolves to IP address 158.94.208.165 in Germany, hosted by AS202412 Omegatech LTD. It uses Cloudflare nameservers (james.ns.cloudflare.com and meiling.ns.cloudflare.com). VirusTotal reports 7 out of 95 vendors flagging it as malicious, including Gridinsoft, Seclookup, and SOCRadar. Additionally, it appears on 1 blocklist and has a GridinSoft trust score of 0 out of 100. The domain lacks an SSL certificate.

Currently, rnut.digital is down or offline, which may indicate it was taken down after detection or is temporarily inactive. Despite its inactive status, the combination of a very recent creation date, high detection rate, zero trust score, and presence on blocklists classifies this domain as high risk. It should be blocked on all systems to prevent access if it becomes active again.