Report Overview
Visitedpublic
2026-02-25 21:58:38
Submit Tags
URL
rugsol.info
Finishing URL
rugsol.info/
IP / ASN
193.233.75.119
#215590 DpkgSoft International Limited
Title
RugSol - Solana Token Scanner

Suspicious - Anti-debugging code

Detections

urlquery
2
Network Intrusion Detection
23
Threat Detection Systems
9

Host Summary

HostRankRegisteredFirst SeenLast Seen
desperate-moccasin-minnow.myfilebase.com
unknown2022-03-182025-12-312026-01-21
uygft-a78s.vercel.app
unknown2020-01-282026-02-252026-02-25
axiomtrading.sfo3.cdn.digitaloceanspaces.com
15405572017-02-232025-09-272026-02-22
metadata.rapidlaunch.io
unknown2025-08-042025-10-112026-02-24
rugsol.info
unknownunknown2026-02-252026-02-25
pub-14c1504681d2427684ac1f489338d075.r2.dev
unknown2022-08-232026-02-252026-02-25
dns.google
1582018-04-162018-10-262026-02-25
ipfs.io
192712014-05-162015-09-092026-02-20

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP
8.8.8.8
ET INFO Observed Google DNS over HTTPS Domain (dns .google in TLS SNI)
mediumClient IP
209.94.90.1
ET INFO Observed Peer-to-Peer File Sharing Service Domain (ipfs .io in TLS SNI)
mediumClient IP
209.94.90.1
ET INFO Observed Peer-to-Peer File Sharing Service Domain (ipfs .io in TLS SNI)
mediumClient IP
209.94.90.1
ET INFO Observed Peer-to-Peer File Sharing Service Domain (ipfs .io in TLS SNI)
mediumClient IP
209.94.90.1
ET INFO Observed Peer-to-Peer File Sharing Service Domain (ipfs .io in TLS SNI)
mediumClient IP
209.94.90.1
ET INFO Observed Peer-to-Peer File Sharing Service Domain (ipfs .io in TLS SNI)
mediumClient IP
209.94.90.1
ET INFO Observed Peer-to-Peer File Sharing Service Domain (ipfs .io in TLS SNI)
lowClient IP
104.18.50.34
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.50.34
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
Threat Detection Systems
Detection SystemIndicatorVerdictAlert
Nextron YARA rulespub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-desktop.gifmalware
Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rulespub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-desktop.gifmalware
Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rulespub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-desktop.gifmalware
Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rulespub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-desktop.gifmalware
Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rulespub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-mobile.gifmalware
Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rulespub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-mobile.gifmalware
Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rulespub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-mobile.gifmalware
Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rulespub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-mobile.gifmalware
Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
DigiCert UltraDNSipfs.iomalicious
Sinkholed

JavaScript (25)

HTTP Transactions (87)

URLIPResponseSize