rocketbotlatam[.]space

PhishDestroy first observed rocketbotlatam.space on Feb 26, 2026. Stored content metadata identifies Across as the apparent target. The captured page title is “Inicio - Rocketbot Software de RPA y automatización de procesos”. Page analysis recorded additional brand references to Celer, Facebook, Google, Instagram, LinkedIn, WhatsApp, Wordpress, and YouTube. Current evidence score: 48/100 (flagged).

No independent positive verdict is present in the stored third-party checks. VirusTotal recorded 0 detections among 93 engines on Mar 4, 2026 at 23:10 UTC. The external blocklist snapshot contained no matches on Aug 7, 2026 at 22:20 UTC. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:16 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:23 UTC; content was unavailable. The recorded creation date for the domain is Feb 21, 2026. Registration preceded first observation by 5 days. At collection time, the hostname resolved to 44.194.186.33 on AS14618 (AMAZON-AES, US). The recorded endpoint location is Ashburn, US. The stored server header is Apache. DOM analysis on Jul 29, 2026 at 04:10 UTC returned 48/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Sectigo RSA Domain Validation Secure Server CA as the certificate issuer.

The classification is based on stored page-analysis fields; no independent positive third-party verdict is stored. The target field identifies Across, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.