rocketlauncher[.]gg

The domain rocketlauncher.gg has been identified as a phishing site engaging in brand impersonation with a specific focus on Discord users. Analysis indicates the site masqueraded as a legitimate service by offering a "Launch meme coin on Solana - use meme generator" tool, a tactic designed to lure victims into interacting with malicious infrastructure. The domain is currently offline, though its prior activity poses residual risks to users who may have encountered it during its active phase. Infrastructure analysis reveals the domain was registered through NameCheap, Inc. and resolved to the IP address 172.67.222.249. It was flagged by 2 of 95 security vendors on VirusTotal, indicating limited but confirmed detection. The site appeared on one security blocklist, specifically PhishDestroy, and was assigned a trust score of 39/100 by Gridinsoft. Detected technologies included Node.js, React, Vercel, Next.js, Yandex.Metrika, HSTS, Google Tag Manager, and Google Analytics, suggesting a modern web stack potentially used to obfuscate malicious intent. The SSL certificate was issued by Google Trust Services, a common tactic to lend an appearance of legitimacy. The current offline status of rocketlauncher.gg reduces immediate exposure, though historical interactions with the domain may still pose risks, particularly for users who engaged with the fake Solana meme coin generator. Organizations and individuals are advised to block the domain and IP address at the network level, revoke any credentials potentially exposed during interactions with the site, and monitor for unauthorized access or transactions. Users should verify the legitimacy of any cryptocurrency-related tools through official channels and avoid engaging with unsolicited offers, particularly those promoting high-risk or too-good-to-be-true opportunities. Security teams are encouraged to review logs for connections to 172.67.222.249 and correlate with any anomalous activity.