rugmark[.]click

This domain, rugmark.click, was registered on 21 February 2026 and is presently taken offline. The site presented the page title “Rugmark,” but no further content analysis is available. Infrastructure inspection shows the domain resolves to the IP address 216.198.79.65, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. The SSL certificate associated with the domain is identified as “R12,” indicating that TLS was provisioned during its brief active period.

Threat intelligence sources have recorded the domain in one AlienVault OTX pulse and it appears on a single security blocklist. PhishDestroy has also listed the domain as blocked. VirusTotal scans report that seven out of ninety‑three security vendors flagged the domain as malicious, confirming a consensus of moderate detection across independent scanners. The combination of a recent creation date, association with a cloud hosting ASN, and multiple independent detections suggests that the domain was used for a generic phishing campaign before being taken down.

Defenders should add rugmark.click to network and DNS blocklists, monitor for any resurgence of the underlying IP address, and consider correlating logs for connections to AS16509 during the active window. Continuous re‑evaluation is advised, as the domain could be re‑registered or the IP may be reused for future malicious activity. Until further evidence emerges, the recommended mitigation is to treat the domain as malicious and enforce blocking at perimeter and endpoint security layers.