rugsol[.]info

This domain, rugsol.info, is identified as a phishing site specifically designed to impersonate Solana’s token scanning infrastructure. Analysis indicates the site mimics legitimate Solana token scanners, potentially tricking users into disclosing wallet credentials, private keys, or authorizing malicious transactions under the guise of token verification. The page title, 'RugSol - Solana Token Scanner,' reinforces the deception by presenting itself as a utility tool, a common tactic in cryptocurrency-related phishing to exploit users seeking to verify token authenticity or transaction statuses. Infrastructure analysis reveals multiple technical indicators supporting its malicious classification. The domain was registered on February 25, 2026, through Global Domain Group LLC, a registrar frequently associated with high-risk domains. It resolves to the IP address 193.233.75.119 and is flagged by 3 out of 95 security vendors on VirusTotal, including detections for brand impersonation. The site appears on three security blocklists and is hosted using technologies such as Node.js, Ubuntu, React, Nginx, Next.js, and Webpack, which are consistent with modern phishing frameworks. A trust score of 0/100 further corroborates its malicious intent. Users who visited rugsol.info or interacted with its content should take immediate action to mitigate potential compromise. Disconnect any connected wallets from the site and revoke any suspicious token approvals or smart contract interactions using a blockchain explorer. Scan the device used to access the site for malware, as phishing pages may deploy additional payloads. Monitor wallet activity for unauthorized transactions and consider migrating assets to a new wallet if credentials were entered. Report the domain to relevant security platforms to aid in broader threat mitigation efforts.