rugbot[.]io

The domain rugbot.io was registered on August 25, 2025 through Hostinger Operations UAB and is currently offline. DNS resolution points to the IP address 172.67.161.31, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative nameservers april.ns.cloudflare.com and mike.ns.cloudflare.com confirm that the domain is hosted behind Cloudflare’s edge network. No TLS certificate is presented for the site, indicating that HTTPS was not configured at the time of takedown.

The publicly visible page title, "RugBot - Create SPL Tokens on Solana Instantly," suggests a cryptocurrency‑related service, yet the listed scam type is brand impersonation targeting the brand Blast. Gridinsoft assigned a trust score of 6 out of 100, reflecting a very low credibility rating. VirusTotal analysis recorded a single positive detection out of 93 security vendors, and the domain appears on one external blocklist, where it is also listed as blocked by PhishDestroy. These indicators collectively demonstrate malicious intent despite the limited detection count.

Uncertainty remains regarding the exact content delivered to victims, as the site was taken offline before a full content scrape could be performed. Defenders should continue to block the domain at network perimeter controls, monitor for any resurgence of the host, and add the IP address 172.67.161.31 to reputation lists. Ongoing surveillance of Cloudflare‑hosted infrastructure linked to this domain is advised, as threat actors may reuse the same CDN edge for future impersonation campaigns.