rugbot[.]cc

This domain, rugbot.cc, is identified as a brand impersonation threat specifically targeting users of the Solana blockchain. The site mimics legitimate Solana services under the pretext of allowing users to 'Launch MemeCoins Online,' a common lure in cryptocurrency-related fraud. The primary risk posed by this domain is the deployment of crypto drainer scripts, which are designed to automatically siphon digital assets from connected wallets without the user's explicit consent. Given the elevated risk level, interaction with this domain could result in immediate and irreversible financial loss for victims. Analysis indicates that rugbot.cc is a highly suspicious domain with multiple red flags. According to VirusTotal, 11 out of 95 security vendors have flagged this domain as malicious, reflecting a consensus among cybersecurity tools about its harmful nature. The domain was registered on November 26, 2025, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals that the domain resolves to the IP address 172.67.186.200 and employs Cloudflare services, including Cloudflare Browser Insights and HTTP/3, which are often used to obfuscate malicious activity and evade detection. Additionally, the domain appears on one security blocklist, further confirming its malicious classification. Users who have visited rugbot.cc or interacted with its content should take immediate action to mitigate potential risks. First, disconnect any cryptocurrency wallets that may have been connected to the site and revoke any suspicious permissions granted to decentralized applications (dApps). Next, scan the device used to access the domain with updated antivirus software to detect and remove any malware that may have been downloaded. Monitor wallet transactions for unauthorized activity and consider transferring assets to a new wallet if any suspicious transactions are detected. Finally, report the domain to relevant cybersecurity organizations and blockchain security platforms to help prevent further victimization.