Back to ScamIntelLogs

RublevkaTeam

TON / Solana Drainer Operation

Drainer CIS Targeting TON + Solana

Operation Summary

One of the largest Russian-speaking drainer operations, targeting CIS users through TON and Solana phishing campaigns. Despite being Russian-speaking, the group actively scams fellow Russian users. Infrastructure includes a website, Telegram bot, and forum presence with a verified 2M+ RUB deposit.

Website: rublevkateam.today
Bot: @RublevkaTeam_bot
Hosting: AEZA AS210644
Admins: @sinactive, @nft4x, @BalaclavaRTD

Evidence Archive

💬
Internal Chat
Group conversations, coordination, disputes
📢
Channel
Announcements and public posts
🎣
Scam Offers
Active phishing campaigns and templates
🎨
Designs
Phishing page templates and clone assets
💰
Confirmed Thefts
Victim wallets, amounts, transaction hashes
📡
New Channel
Updated channel content
👥
Scammer List
Participant Telegram IDs and usernames
📊
Scammer Database
Google Spreadsheet with full database

Collected by PhishDestroy | GitHub