rugmark[.]me
“rugmark.me | 522: Connection timed out”
Pengamatan tersimpan
Perbedaan judul yang diamati
The domain rugmark.me was registered on May 01, 2026 through Global Domain Group LLC. It is delegated to the Cloudflare name servers ingrid.ns.cloudflare.com and nitin.ns.cloudflare.com, and resolves to the IP address 188.114.96.3, which is part of Cloudflare, Inc. infrastructure located in Canada. The TLS certificate is issued by Let’s Encrypt (identifier YE2) and the site returns an HTTP 301 redirect that ultimately serves a page titled “rugmark.me | 522: Connection timed out”. The presence of HTTP/3 and Cloudflare services indicates the attacker is leveraging a reputable CDN to obscure origin details.
Threat intelligence classifies the site as a “Crypto Drainer” phishing operation. The risk level is high and the campaign is active. The domain appears on one public blocklist and is explicitly listed by PhishDestroy. VirusTotal scans show that six out of ninety‑five security vendors have flagged the domain, while the Gridinsoft trust score is 0 out of 100, reflecting a strong malicious reputation. The limited detection count suggests the activity is still early in its lifecycle, but the combination of a fresh registration, CDN masking, and a low‑trust score supports a heightened threat posture.
Defenders should block DNS resolution for rugmark.me and its associated IP 188.114.96.3 at the network perimeter. Email filtering rules should be updated to quarantine messages that reference the domain or contain known crypto‑drainer lures. Continuous monitoring of Cloudflare‑hosted IP ranges for anomalous traffic, as well as periodic re‑scanning of the domain on multi‑vendor platforms, will help detect any escalation. Because the origin server is hidden behind a CDN, a sinkhole or proxy‑based inspection may be required to capture payloads if the site becomes reachable.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | rugmark.me |
malicious | Sinkholed |
| DNS4EU | rugmark.me |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber · disinkronkan 10/08/2026
Teknologi
2 teknologi dengan keyakinan tinggi teridentifikasi
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive