rust-market[.]com

rust-market.com is a recently registered domain (January 11, 2026) that PhishDestroy analysts have flagged as actively hosting a cryptocurrency drainer posing as a legitimate online marketplace. The site lures victims with the promise of trading or purchasing digital assets, only to silently drain connected wallets via malicious JavaScript or deceptive transaction prompts. Browser extensions or wallet integrations may intercept and falsify transaction details, making funds vanish before users realize what happened. Such attacks typically target users searching for niche crypto services, exploiting urgency or perceived exclusivity to bypass caution. This domain was flagged by PhishDestroy after observing zero detections (0/95) on VirusTotal, indicating it’s not yet widely blacklisted despite clear malicious intent. It resolves to IP 95.85.245.109 and uses a Let’s Encrypt SSL certificate to appear legitimate, adding to its credibility. The domain was registered through RU-CENTER (Regional Network Information Center, JSC), a route commonly abused for short-lived malicious domains due to lax or delayed takedown policies. Given the fresh registration window of just days, this site remains highly fluid and responsive to takedown efforts. If you visited rust-market.com or entered any wallet information, disconnect your wallet immediately and revoke any unauthorized permissions via your wallet’s settings or tools like revoke.cash. Scan your system with updated antivirus and consider resetting browser extensions associated with crypto. Report the domain to PhishDestroy and file a complaint with IC3 (FBI’s Internet Crime Complaint Center) if financial loss occurred. Monitor your wallet and transaction history closely—malicious domains often modify display data to hide theft, so verify transfers independently via blockchain explorers.