rugsolo[.]com

PhishDestroy identifies rugsolo.com as an active crypto drainer phishing domain currently under investigation. The site masquerades as a legitimate platform to deceive users into connecting cryptocurrency wallets for unauthorized fund transfers. This domain is classified as a critical threat due to its potential to facilitate irreversible financial losses through wallet drainage attacks. rugsolo.com was registered on April 15, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, resolving to IP address 172.67.207.246. The domain remains undetected by all 95 VirusTotal vendors and lacks any presence on major blocklists at this time. The SSL certificate, issued by Let’s Encrypt, adds superficial legitimacy but does not mitigate the underlying malicious intent. With no current reputation or trust scores, the domain presents an elevated risk for cryptocurrency users and organizations. As of this report, rugsolo.com remains active and unblocked. Users are strongly advised to avoid interaction with this domain and verify all cryptocurrency-related URLs through official channels. Organizations should implement network-level blocks for the associated IP (172.67.207.246) and monitor for related wallet addresses. Immediate reporting to cybersecurity teams or platforms like PhishDestroy is recommended to prevent further victimization. Proactive threat intelligence sharing is critical to disrupting this campaign before additional damage occurs.