Found via IP pivot from testing-airbnb.duckdns.org

Indicator rnuser.rnusdt.com Type domain Category SEO Poisoning Confidence medium VT Score 0/94 (pending) Source urlscan First Seen 2026-08-28 08:00:22 UTC Last Seen 2026-08-28 08:00:22 UTC urlscan View scan result ↗
Raw JSON
{
  "verdicts": {
    "score": 0,
    "malicious": false,
    "urlscan": {
      "malicious": false
    },
    "engines": {
      "score": 0,
      "malicious": false,
      "hasVerdicts": false
    },
    "community": {
      "score": 0,
      "malicious": false,
      "hasVerdicts": false
    }
  },
  "dom": {
    "size": 10317,
    "hash": "2416d42a4a83a6573baacac9c724a0931e40b3083a66c4bc87482b0bba437396"
  },
  "frames": {
    "length": 1
  },
  "canonical": {
    "task": {
      "url": "rnuser.rnusdt.com"
    },
    "page": {
      "url": "rnuser.rnusdt.com/index/login"
    }
  },
  "screenshot": "https://urlscan.io/screenshots/79ff2877-01af-42fc-91ac-90e782c28732.png",
  "task": {
    "visibility": "public",
    "method": "automatic",
    "domain": "rnuser.rnusdt.com",
    "apexDomain": "rnusdt.com",
    "time": "2022-05-23T19:08:20.400Z",
    "source": "certstream-suspicious",
    "uuid": "79ff2877-01af-42fc-91ac-90e782c28732",
    "url": "https://rnuser.rnusdt.com"
  },
  "stats": {
    "uniqIPs": 1,
    "uniqCountries": 1,
    "dataLength": 1299906,
    "encodedDataLength": 399333,
    "requests": 43
  },
  "scanner": {
    "country": "de"
  },
  "links": {
    "length": 0
  },
  "page": {
    "country": "US",
    "server": "nginx",
    "redirected": "same-domain",
    "ip": "193.149.176.3",
    "mimeType": "text/html",
    "title": "Login",
    "url": "https://rnuser.rnusdt.com/index/login",
    "tlsValidDays": 89,
    "tlsAgeDays": 0,
    "tlsValidFrom": "2022-05-23T17:25:06.000Z",
    "domain": "rnuser.rnusdt.com",
    "apexDomain": "rnusdt.com",
    "asnname": "BLNWX, US",
    "asn": "AS399629",
    "tlsIssuer": "R3",
    "status": "200"
  },
  "text": {
    "size": 1727,
    "hash": "63dd7373b7b58638cc9111fdaabb2326e47a3486e6f9a9da850569ea93681883"
  },
  "usertags": [],
  "meta": [],
  "_id": "79ff2877-01af-42fc-91ac-90e782c28732",
  "_score": null,
  "sort": [
    1653332900400,
    "79ff2877-01af-42fc-91ac-90e782c28732"
  ],
  "image": {
    "size": 14738,
    "width": 1600,
    "height": 1200,
    "aspectratio": 1.3300000429153442
  },
  "result": "https://urlscan.io/api/v1/result/79ff2877-01af-42fc-91ac-90e782c28732/"
}