rushfinil.com — Generic Phishing Campaign Under Investigation

rushfinil.com is a domain linked to an active generic phishing campaign identified by PhishDestroy. The infrastructure is currently under investigation, with no specific brand impersonation confirmed at this stage. Threat intelligence indicates this domain may be used for deceptive user credential harvesting or fraudulent transaction processing, though the exact lure remains unverified.

This domain was flagged by 0 of 95 VirusTotal vendors, indicating no detection signatures have been triggered yet. It is registered through Fewmoretaps OU d/b/a Trustname.com, resolves to IP 104.160.240.65, and was created on January 03, 2026. The domain utilizes a Let's Encrypt SSL certificate, and initial trust scores are undetermined due to the recent registration date. No known blocklist associations or historical malicious activity were detected at the time of investigation.

The campaign remains active and poses an immediate risk to users who may encounter the domain via email, SMS, or web redirects. PhishDestroy recommends flagging rushfinil.com in organizational threat intelligence platforms and browser blocklists. Users should avoid accessing the domain and report any related phishing attempts to their security teams via official incident reporting channels. Continuous monitoring of this domain for evolving indicators is advised until a conclusive risk assessment is completed.