proposal-rocketpool[.]xyz

The domain proposal-rocketpool.xyz is a brand impersonation threat specifically targeting Rocket Pool, a decentralized staking protocol. This domain is currently offline, but during its active period it posed a significant risk to users by mimicking the legitimate Rocket Pool platform to harvest login credentials or sensitive information.

PhishDestroy's analysis reveals that proposal-rocketpool.xyz resolves to IP address 188.114.96.3 and was registered through Dynadot LLC on April 14, 2026. The domain is flagged by 3 security blocklists and appears in 1 AlienVault OTX threat intelligence pulse. VirusTotal data shows that 5 out of 95 security vendors flagged this domain as malicious, indicating moderate detection coverage. The SSL certificate is issued by Let's Encrypt (E7), which is commonly abused by phishing sites due to its free and automated issuance.

Although the domain has been taken offline, users who may have encountered it should be vigilant. PhishDestroy recommends avoiding any interaction with the domain and ensuring that any credentials entered there are immediately changed on the legitimate Rocket Pool website. Users should enable multi-factor authentication and monitor accounts for suspicious activity. The domain's registration details and technical indicators serve as a warning to remain cautious of similar impersonation attempts in the future.