rocket-perps[.]org

rocket-perps.org is currently under investigation for potential involvement in generic phishing activity. As of July 28, 2026, the domain is active and was registered recently, on July 24, 2026, through Fewmoretaps OU operating as Trustname.com. Its DNS infrastructure utilizes nameservers from both trustname.com and anycastdns.cz, indicating a multi-provider setup. The domain currently resolves to the IP address 186.2.175.35.

From a threat intelligence perspective, rocket-perps.org has been identified on at least one security blocklist. Specifically, it has been blocked by PhishDestroy, a known anti-phishing service. This listing suggests that there is actionable concern within the security community, although the precise nature of the threat and the content hosted on the domain have not been directly observed or analyzed in this report. The domain does not currently appear on other blocklists, and no additional threat indicators—such as SSL certificate details, HTTP status, or page content—are available for further assessment at this time.

While a scan by 91 vendors on VirusTotal showed zero current detections, the absence of detections is not definitive proof of safety. The fact that the domain is newly registered and already appears on a trusted blocklist warrants heightened scrutiny. Defenders are advised to monitor for any network traffic or user interaction with rocket-perps.org, and to consider blocking or closely inspecting any related activity until the investigation is concluded and more information is available. The exact content or tactics used on the site are not yet analyzed, so defenders should remain alert for updates from threat intelligence sources.