# rocketpool.info — SUSPICIOUS

> PhishDestroy flags rocketpool.info as a brand impersonation site mimicking Rocket Pool. Current VirusTotal score: 0/95. Investigate and block now.

## Summary
Domain rocketpool.info has been flagged under seed 6572fd as a brand impersonation threat targeting Rocket Pool, a decentralized Ethereum staking protocol. Analysis indicates this domain is designed to deceive users into believing they are interacting with the legitimate Rocket Pool brand, potentially leading to credential theft or cryptocurrency drainer activity. While no active drainer kit has been identified in this initial assessment, the domain's structure and naming convention strongly suggest malicious intent aimed at exploiting brand trust within the Ethereum staking community.  

 Technical indicators reveal several concerning attributes. The domain, registered through NameCheap, Inc., was created on April 09, 2021, and currently resolves to IP address 188.114.96.3. VirusTotal analysis shows 0 detections out of 95 engines, indicating a low detection rate despite the domain's suspicious nature. The domain holds a valid SSL certificate issued by Google Trust Services, which may further enhance its credibility to unsuspecting users. Notably, no blocklist entries have been recorded for this domain as of this analysis.  

 This domain remains active and under investigation with a current risk level classified as 'under_investigation.' Immediate actions include blocking the domain at the network level and flagging it for further behavioral analysis. Users and organizations are advised to avoid accessing rocketpool.info and to report any suspicious interactions. The low VirusTotal score suggests this domain is either very new to malicious activities or employs evasion techniques to avoid detection. Continued monitoring and sharing of threat intelligence within the SOC community are critical to mitigating potential risks associated with this impersonation attempt.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Rocket Pool

## Domain Intelligence
- Registered: 2021-04-09 18:00:50
- Registrar: NameCheap, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/rocketpool.info
- PhishDestroy: https://phishdestroy.io/domain/rocketpool.info/
- LLM endpoint: https://phishdestroy.io/domain/rocketpool.info/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rocketpool.info/
Last updated: 2026-04-03