grunter[.]ru[.]com

This report analyzes the domain grunter.ru.com, which presents itself as a "Bulletproof Hosting" service. Such services are specifically marketed to cybercriminals seeking to host malicious content, command-and-control infrastructure, or phishing pages with reduced risk of takedown. The primary threat posed by this domain is facilitating malicious online activities by providing a stable hosting environment that resists standard abuse reporting and enforcement actions.

Technical analysis reveals this site is highly suspicious. VirusTotal shows 6 out of 95 security vendors flagged the domain, including alphaMountain.ai, CyRadar, ESET, Fortinet, and Phishing Database. The domain is listed on 2 blocklists. It is registered through PCI-US-WEST-OR-1 (ASN 16276) and resolves to IP address 15.204.31.31, located in the United States, belonging to OVH SAS (AS16276). The SSL certificate is issued by Let's Encrypt (serial E8). Nameservers are ns1.panelhoster.ru.com and ns2.panelhoster.ru.com. No creation date is provided in the available data.

The current status of grunter.ru.com is BANNED, and its GridinSoft trust score is 0 out of 100, indicating extremely low trust. The risk level is high. The site's self-identification as a bulletproof hoster, combined with multiple vendor flags and a zero trust score, confirms it is an active threat vector, likely involved in hosting malicious content or criminal infrastructure.