rugsafe[.]eu[.]cc

The domain rugsafe.eu.cc has been identified as a brand impersonation threat targeting the Solana cryptocurrency ecosystem. The page title, "IS IT A RUG? - Solana Token Risk Analysis," is designed to lure users into believing it offers legitimate token risk analysis while actually impersonating the Solana brand. This domain was likely set up to deceive users into connecting their wallets or providing sensitive information, ultimately leading to asset theft. Although no specific drainer kit was identified, the brand impersonation nature of the threat suggests a high risk of crypto drainer activity.

Technical indicators reinforce the malicious nature of rugsafe.eu.cc. VirusTotal data shows that 2 out of 95 security vendors flag this domain as malicious, and it appears on 1 security blocklist. The domain resolves to IP address 216.24.57.7 and was registered through Gname.com Pte. Ltd., with a creation date of October 13, 1997—an unusually old registration that may indicate a compromised or repurposed domain. No SSL certificate was detected, further reducing trustworthiness. Google Safe Browsing status is not explicitly provided, but the blocklist presence is a clear warning.

As of the latest analysis, rugsafe.eu.cc is offline, meaning the hosting has been taken down or the domain is no longer resolving. This suggests that security teams or hosting providers have responded to the threat. However, users should remain cautious, as similar domains may reappear under different names. PhishDestroy recommends avoiding any interaction with this domain or related URLs. If you have previously visited rugsafe.eu.cc, revoke any wallet permissions and monitor your accounts for suspicious activity. Always verify the authenticity of Solana-related tools through official channels.