{"eid":"netnut","name":"NetNut","domain":"netnut.io","resolved_by":"domain","topics":["ip-proxy"],"n_records":1,"best_vorder":7,"review":null,"aliases":["NetNut","netnut.io"],"records":[{"rid":"ip-proxy/netnut-seized","card":{"rid":"ip-proxy/netnut-seized","eid":"netnut","topic":"ip-proxy","slug":"netnut-seized","provider":"NetNut","url":"https://netnut.io/","domain":"netnut.io","category":"residential proxy network","tier":"none","verdict":"dead","vorder":7,"grp":"dead","confidence":"documented","binding":"none","identity_kind":"email","identity_basis":"stated","needs_card":0,"needs_phone":0,"needs_id":0,"needs_institution":0,"country":null,"crypto":null,"interfaces":null,"egress_metered":0,"per_object_bytes":null,"retention_days":null,"verified_at":"2026-10-24T10:07:11.000Z","verified_basis":"live","checked_on":"2026-10-25","stale_on":"2026-11-24","n_evidence":5,"usd_month":null,"usd_per_tb_month":null,"summary":"nothing reachable: both https://netnut.io/ and https://netnut.com/ returned an FBI seizure notice on every path tried, including /pricing/ and /robots.txt, o...","duplicate_of":null,"n_unknown":2},"record":{"topic":"ip-proxy","slug":"netnut-seized","provider":"NetNut","url":"https://netnut.io/","category":"residential proxy network","tier":"none","free_tier":{"stated":"nothing reachable: both https://netnut.io/ and https://netnut.com/ returned an FBI seizure notice on every path tried, including /pricing/ and /robots.txt, on 2026-10-24, so no offer, allowance or price could be read","unit":"none","metered_on":"none","source_url":"https://netnut.io/pricing/","read_on":"2026-10-24","notes":"Eight paths across the two domains were fetched: the roots, /robots.txt, /pricing/ and /api on netnut.io, and the roots, /robots.txt, /pricing/ and /status on netnut.com. All eight returned HTTP 200 with exactly 297,312 bytes."},"per_object_cap":{"stated":"not applicable","bytes":null,"source_url":"https://netnut.io/","notes":"no stored object exists to cap. What a residential proxy sells is traffic through an address, and the traffic figure is the one no page would state."},"retention":{"stated":"not applicable: a live proxy session, not stored bytes","days":null,"source_url":"https://netnut.io/","notes":""},"egress":{"terms":"unverified: no traffic term could be read. Both https://netnut.io/ and https://netnut.com/ served the seizure notice on every path tried on 2026-10-24, including /robots.txt. The metered flag is false because no published meter was found to record, not because traffic was free.","metered":false,"free_allowance":null,"price_per_tb":null,"source_url":"https://netnut.io/"},"interface":["unknown"],"interface_detail":"unknown because nothing is served: both domains answer every path with the seizure notice, so no API, proxy endpoint or web UI could be observed. A residential proxy is consumed by pointing a SOCKS5- or HTTP-proxy-capable client at an endpoint the vendor issues; that is the category's normal shape and it was not observed here.","tooling":"Nothing to point a client at. The client already has what the category needs, since curl --proxy, requests or any SOCKS5-capable HTTP client reaches a proxy endpoint; the endpoint and the credentials are what no longer exist. A wrapper is not the obstacle, so this is not a tooling rejection.","chaining":"Nothing to chain: a gateway that routed requests through a NetNut endpoint would fail at connect time, because every hostname returns an HTML seizure page instead of a proxy handshake. A comparison table that still lists NetNut is pricing a service that cannot be bought.","limits":[],"limits_note":"No constraint of any kind could be read: both domains serve the seizure notice on every path, so there is no rate, cap, quota or shaping figure to record. The event that ends the offer is the seizure of the domains, and it is in reliability_note because it is not one of the vocabulary kinds.","binding":"none","binding_note":"Nothing in the vocabulary fails at a user's  scale because nothing is served at any scale: the constraint that ends the provider is the FBI seizure of its domains on 2026-07-02, which is an event rather than a limit kind.","identity_cost":{"kind":"email","detail":"n/a, as the assignment states, and unverified beyond that: no signup page is served, so no registration route could be read on either domain. The email kind is the corpus's placeholder for a record whose signup gate cannot be observed; it is not a finding that an email address was the gate.","country":null},"reliability_note":"Domains seized by the FBI: netnut.io and netnut.com returned the same 297,312-byte page on every path tried, including /robots.txt and /pricing/, on 2026-10-24, so no proxy endpoint, credential or status page answers.","confidence":"documented","confidence_note":"Documented is the weakest rung among the fields the verdict rests on. The seizure notice was re-observed today from outside the vendor, which is the measured rung, but the corroborating statement is a filed exhibit read as a document, so the record carries the lower rung. Moving it to measured would need a probe record for the eight fetches rather than a note in evidence.","evidence":[{"url":"https://netnut.io/","date":"2026-10-24","proved":"broker fetch returned HTTP 200 with 297,312 bytes and the title 'Seized by the Federal Bureau of Investigation'. The body holds one embedded base64 JPEG and no other text, so the title is the only machine-readable statement the page makes and the notice's own wording is not quotable from the HTML."},{"url":"https://netnut.io/robots.txt","date":"2026-10-24","proved":"the same 297,312-byte seizure page rather than a robots.txt, so the notice is served on every path and not only on the site root; this is what rules out a vendor challenge page or a single broken route."},{"url":"https://netnut.com/","date":"2026-10-24","proved":"HTTP 200, 297,312 bytes, the same title: the second domain carries the same notice, so there is no alternate hostname to fall back to."},{"url":"https://netnut.io/pricing/","date":"2026-10-24","proved":"HTTP 200, 297,312 bytes, the seizure page: the pricing route that would have carried the offer returns the notice, which is why free_tier records nothing reachable."},{"url":"https://www.sec.gov/Archives/edgar/data/1725332/000121390026075170/ea029706002ex99-2.htm","date":"2026-10-24","proved":"Alarum Technologies Exhibit 99.2, a press release issued 2026-07-03: 'As previously disclosed, on July 2, 2026, the Company and its subsidiary, NetNut Ltd. (\"NetNut\"), became aware that certain domains associated with NetNut had been seized by the U.S. Federal Bureau of Investigations (\"FBI\").' The same exhibit adds that 'additional domains associated with NetNut have also been seized' and that 'the Company is currently experiencing disruptions to a portion of its services.'"}],"verdict":"dead","verified_at":"2026-10-24T10:07:11.000Z","price_per_tb_month":null,"notes":"The verdict rests on two independent sources rather than one sample: the notice observed on eight paths across two domains today, and the parent company's own filed exhibit. Three other explanations for the page were considered and refuted. (1) A WAF or challenge page: refuted, because the response is a 200 carrying a page titled for the FBI and because it is served on /robots.txt, which no vendor challenge covers. (2) A parked or lapsed domain: refuted by that title and by the exhibit naming a seizure on 2026-07-02. (3) An operator-side DNS or origin fault: refuted because all eight paths on both hostnames returned byte-identical responses of 297,312 bytes, which is one served document rather than eight independent failures. What is not settled: whether the domains return, and whether any NetNut endpoint survives on a hostname not tried here. Alarum's update says only that it continued to analyse the incident, so nothing read today establishes restoration. Two deviations are deliberate. The interface list carries 'unknown' because the assignment's vocabulary (api, socks5, http-proxy, web-ui and the rest) is not in scripts/dossier/schema.json, whose enum ends at 'unknown', and no page read here established an interface anyway. The quote supplied with the assignment shortens the exhibit's 'by the U.S. Federal Bureau of Investigations (\"FBI\")' to 'by the FBI'; the evidence entry quotes the exhibit verbatim. That is why third-party comparison tables still carry the vendor, and why this record exists.","extras":{"rung":2,"rung_note":"A residential network is bought to present a different single address, which is rung 2 and the cheapest rung to clear, and it is the category that also reaches rung 5 through eyeball-registered prefixes, but no page read here established a registration class and nothing is purchasable now.","provider_as_written":"NetNut (Alarum Technologies)","domains_checked":"netnut.io and netnut.com, eight paths, all HTTP 200 at 297,312 bytes on 2026-10-24"}},"claims":[{"path":"$.free_tier.stated","kind":"free-quota","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"}],"unknown":[["$.interface","interface-unknown"],["$.per_object_cap.stated","not-applicable"]],"history":[],"drift":[]}]}