rugbot[.]blockchainplug[.]net

The domain rugbot.blockchainplug.net is a cryptocurrency phishing site engaged in brand impersonation targeting Sui. It presents itself as a legitimate service under the name 'RugBot Suite' but is designed to deceive users into disclosing wallet credentials or transferring funds to attacker-controlled addresses. No drainer kit was identified, but the site poses an elevated risk due to its fraudulent representation of the Sui brand. As of the latest verification, rugbot.blockchainplug.net has been taken offline.

Technical indicators confirm the malicious nature of rugbot.blockchainplug.net. The domain was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned a trust score of 0/100. It appears on 1 security blocklist, specifically PhishDestroy. The domain was created on February 21, 2026, and resolves to the IP address 185.158.133.1, located in Poland and associated with AS13335 Cloudflare, Inc. The SSL certificate is issued by E5, and the observed page title was 'RugBot Suite'. Google Safe Browsing has not flagged the domain, but the combination of blocklist presence and low detection scores underscores its risk.

Users who interacted with rugbot.blockchainplug.net should immediately revoke any token approvals granted to suspicious contracts and transfer remaining funds to a new, secure wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the phishing domain to the impersonated brand, Sui, and submit it to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to prevent further victimization.