rocketdip[.]pages[.]dev

rocketdip.pages.dev has been flagged by PhishDestroy for a specific fake-crypto-donation phishing campaign designed to trick users into sending cryptocurrency to fraudulent wallets under the guise of charitable contributions. The risk level is currently under investigation but remains active, meaning the phishing page is still accessible and collecting funds. Technical analysis indicates the page mimics legitimate donation portals with high-production visuals and urgent language to pressure users into quick transfers. The threat is not generic phishing; it is a targeted donation scam leveraging crypto-asset theft mechanisms.

This domain was registered through Cloudflare, Inc. and resolves to IP 188.114.97.3. VirusTotal currently shows 0 out of 95 antivirus engines detecting the page, indicating zero current signatures. The site holds a valid SSL certificate issued by Google Trust Services, which could falsely reassure visitors of legitimacy. No known blocklist entries are present in major DNS-based threat feeds as of this analysis. The IP address resolves to Cloudflare’s US data center range, commonly used to host phishing pages due to anonymity and rapid takedown circumvention.

Mitigation requires immediate blocking of the IP 188.114.97.3 and domain rocketdip.pages.dev at network and browser levels. Users should avoid clicking any links or interacting with the page, especially those requesting crypto wallet connections or direct transfers. Report the page to Cloudflare via their abuse portal and to your organization’s SOC for domain takedown requests. Enable real-time phishing detection tools and browser extensions that filter known crypto-scam URLs. Educate teams on recognizing donation scams that pressure for immediate crypto transfers, as urgency and blockchain irreversibility are key indicators of this fraud type.