The domain www.rocketbot-latam.digital has been identified as a brand impersonation threat, specifically targeting the Rocketbot RPA software brand. The page title, "Inicio - Rocketbot Software de RPA y automatización de procesos," closely mimics the legitimate Rocketbot site, deceiving users into believing they are interacting with an official platform. This phishing domain is designed to steal credentials or sensitive information from unsuspecting visitors, posing a significant risk to the brand's reputation and user security.
Technical analysis reveals critical indicators of malicious activity. VirusTotal flags this domain with a score of 1 out of 95 security vendors, meaning only one vendor detected it as malicious, making it a stealthy threat. The domain is registered through HOSTINGER operations, UAB, and resolves to IP address 44.194.186.33. It is currently listed on one security blocklist, and Google Safe Browsing (GSB) has flagged it. The SSL certificate is issued by Let's Encrypt (R13), which is commonly used by both legitimate and malicious sites, adding to the difficulty of detection. These exact technical indicators confirm that the domain is actively used for phishing operations.
The domain is currently offline, indicating that proactive response actions have been taken to mitigate the immediate threat. PhishDestroy has flagged this domain and recommends that users avoid any interaction with it. While the domain is now inactive, the risk remains that similar domains may appear, or that this domain could become active again in the future. Users who have visited the site or entered credentials should change their passwords immediately and enable two-factor authentication. Always verify the authenticity of Rocketbot-related sites through official channels, and report any suspicious domains to PhishDestroy for further analysis.
DOM Analysisanalyzed 2026年3月11日score 10/1009 brand signals
Submitted URLhttp://www.rocketbot-latam.digital/
Favicon Hash
ICANN OVERSIGHT
認定と RAA の背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Certificate fingerprint052ae2dafb3325797a9b216364a95415c5656288559c1fd49f7e9c86a44f69c9Certificate names · 1 SANs
rocketbot-latam.digital
Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.
Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.
Google PageSpeed Insights — mobile performance audit of duplicate-disabled-10816.invalid· checked Mar 2, 2026
30
Poor
Performance
FCP
4.78s
First Contentful Paint
LCP
5.48s
Largest Contentful Paint
CLS
0.155
Cumulative Layout Shift
TBT
1412ms
Total Blocking Time
SI
11.13s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good50-89 Needs Work0-49 Poor
Registration & observation details1
Availability observations
Last reachable observation
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Check for cloaking
Compare what a browser and a crawler receive, and check for Keitaro traffic routing.
No cloaking flag in this check
unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='duplicate-disabled-10816.invalid', port=80): Max retries exceeded with url: / (Caused by N
Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
Payment records — if you paid, save the receipt, amount, date, payment provider and recipient details.
Your bank or payment provider — contact its fraud team promptly through official contact details if money or card information was exposed.
地元の警察 — たとえ直ちに行動を起こせなくても、公式な記録が残される
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
詐欺による金銭の返還を装った詐欺 — fraudsters pose as recovery agents and demand upfront fees. Never share a seed phrase or pay before independently verifying the provider
About this reportSources, observation dates and corrections
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.
(LT)
