rugchecker[.]fun

Analysis of rugchecker.fun indicates a coordinated brand impersonation campaign targeting Chainlink users. The domain was registered on September 18, 2025 through Hostinger Operations, UAB, and resolves to an SSL certificate identified as R13, suggesting a low‑trust or self‑signed certificate. The site’s page title, "Rug Checker - Smart Contract Security Scanner," aligns with the declared scam type of a crypto scam, but no additional page content has been examined.

Independent detection sources have flagged the domain: eight of ninety‑three VirusTotal scanners reported malicious behavior, and the domain appears on two external blocklists, specifically PhishDestroy and CryptoFirewall. AlienVault OTX records the domain in two threat‑intel pulses, reinforcing its association with malicious activity. A Gridinsoft trust score of 0 out of 100 further confirms the poor reputation.

Current operational status shows the domain taken offline, yet the historical indicators warrant continued monitoring. Defenders should immediately block rugchecker.fun at perimeter and DNS levels, update web‑filter and endpoint protection rules, and alert end users that any service claiming to scan smart contracts under the "Rug Checker" name may be fraudulent. Ongoing surveillance is recommended to detect potential re‑hosting or new infrastructure tied to the same registration details, as the threat actor may attempt to re‑establish the service under a different domain.