rustloot[.]top

Analysis conducted on July 20, 2026 identifies rustloot.top as an active generic phishing infrastructure with a high risk rating. The domain was registered on July 04, 2026 through Global Domain Group LLC and is currently resolved to the IPv4 address 192.162.199.140. Authoritative name servers listed for the zone are ns1.eternitynames.net, ns2.eternitynames.net, ns3.eternitynames.net, and ns4.eternityna, suggesting the use of a shared hosting environment. VirusTotal reports that two of ninety‑five security vendors have flagged the domain, indicating limited but notable detection across the threat‑intelligence ecosystem. The site appears on a single external blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its classification as malicious. The only publicly visible artifact is the page title "Whiteout Case — Free Rust Skin Drop," which aligns with a common lure technique that promises in‑game items to entice victims. No additional data on SSL certificates, HTTP response codes, or content rendering is available, leaving those aspects unverified. Defenders should treat rustloot.top as hostile, enforce network‑level blocking, and incorporate the domain and its associated IP address into intrusion‑prevention and detection rules. Continuous monitoring of DNS queries for the listed name servers is advised to detect potential re‑use or pivoting. Given the high‑risk designation and active status, immediate remediation actions are warranted to mitigate exposure to credential‑stealing or malware delivery campaigns that may be hosted on this infrastructure.