enter[.]rustoutpost[.]net

On 23 July 2026, the domain enter.rustoutpost.net was identified as a high‑risk brand‑impersonation site targeting Steam users. The domain resolves to the IPv4 address 185.178.208.158, which is allocated to AS57724 DDOS‑GUARD LTD and geolocated to Russia. The authoritative name servers are ns1.ddos-guard.net and ns2.ddos-guard.net, indicating reliance on a DDoS‑mitigation provider for infrastructure. The domain was registered on 10 November 2025 through Web Commerce Communications Limited; no SSL certificate is presented, and HTTPS connections are not available.

The page title returned from the site is "Sign In", matching the declared brand target. Google Safe Browsing classifies the domain as a social‑engineering threat. VirusTotal analysis shows that 12 of 95 scanning engines flag the domain, reinforcing the detection. The site is listed on a single security blocklist and has been actively blocked by the PhishDestroy service.

Scamadviser assigns a trust score of 1 out of 100, reflecting extreme untrustworthiness. The site’s current status is offline, which limits immediate content inspection, but the existing artifacts confirm the intent to harvest credentials. Defenders should add the IP address 185.178.208.158 and the domain enter.rustoutpost.net to outbound and inbound filtering rules, ensure that any credential‑submission attempts to Steam‑related URLs are blocked, and monitor for similar domains using the same registrar or name‑server pattern. Continuous re‑evaluation is advised in case the infrastructure reappears or evolves, and threat‑intel sharing platforms should be updated with the observed indicators of compromise.