rustbeacon[.]net

rustbeacon.net was registered on 2025-11-07 through Web Commerce Communications Limited and currently resolves to 185.178.208.158, an address owned by AS57724 DDOS‑GUARD LTD in Russia. The domain is hosted on nameservers ns1.ddos-guard.net and ns2.ddos-guard.net and does not present an SSL certificate, indicating that any data transmitted to the site would be unencrypted. The site’s front‑page title reads “RustBeacon | Community for RUST Skin Designers”, suggesting an attempt to attract users interested in the Rust game community. No further content analysis is available because the site has been taken offline at the time of writing.

Threat intelligence sources classify the domain as a generic phishing infrastructure. AlienVault OTX has referenced rustbeacon.net in fifteen separate pulses, reinforcing its association with malicious campaigns. VirusTotal scans have resulted in fifteen of ninety‑five security vendors flagging the domain, indicating a moderate level of detection across the industry. Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on one external blocklist.

PhishDestroy has actively blocked the host, further confirming its use in phishing operations. Given the observed indicators—recent registration, Russian hosting, lack of TLS, multiple vendor detections, and inclusion in threat‑intel feeds—defenders should continue to block rustbeacon.net at the DNS and proxy layers, monitor for any re‑hosting attempts, and include the associated IP address 185.178.208.158 in network‑level blacklists. Analysts should also watch for new domains registered by the same registrar that resolve to the same nameservers, as they may represent a continuation of the same campaign. Until the site is definitively taken down, the risk remains elevated.