rocketbot-br[.]digital

The domain rocketbot-br.digital was a phishing site engaged in brand impersonation targeting WordPress users. It posed an elevated risk by mimicking the WordPress brand to deceive visitors into disclosing login credentials or other sensitive information. No crypto drainer kit was associated with this campaign. The site is currently taken offline, reducing immediate exposure, but prior visitors may remain at risk.

Technical indicators confirm the malicious nature of rocketbot-br.digital. As of analysis, 2 of 95 VirusTotal security vendors flagged the domain, including Gridinsoft, which assigned a trust score of 0/100. The domain was registered on July 29, 2025, through HOSTINGER operations, UAB, and resolved to the IP address 46.202.172.166, located in France under AS47583 (Hostinger International Limited). The SSL certificate was issued by WR1, and the observed page title was 'Página por defecto'. It appeared on one security blocklist, PhishDestroy, while Google Safe Browsing had not flagged it at the time of assessment.

Individuals who interacted with rocketbot-br.digital should immediately change any passwords entered on the site, particularly for WordPress or related accounts. Enable two-factor authentication (2FA) on all critical services to mitigate unauthorized access. Monitor accounts for signs of fraud, such as unauthorized logins or transactions. Report the domain to relevant platforms, including the registrar (HOSTINGER operations, UAB), security vendors like PhishDestroy, and local cybercrime authorities to aid in takedown efforts.