therockuniverse[.]live

The domain therockuniverse.live was registered on February 21, 2026 and is presently taken offline. Infrastructure analysis shows that the host resolves to the IPv4 address 172.245.14.131, which is advertised as part of AS36352 operated by HostPapa and geolocated in the United States. The site presented the page title “The Rock Universe - Official Fan Platform for Dwayne Johnson,” suggesting an attempt to impersonate the public figure and, by extension, the associated entertainment brand. The campaign is classified as a crypto‑focused brand impersonation scam, indicating that victims may have been lured into cryptocurrency transactions under false pretenses.

VirusTotal scans reported three detections out of ninety‑three scanning engines, and the domain appears on a single external blocklist. Independent reputation services score the site at the minimum value, with Gridinsoft assigning a trust score of 0 out of 100, and the domain is listed as blocked by the PhishDestroy mitigation service. The SSL certificate is identified as the R10 profile, confirming that transport‑layer encryption was present during the brief operational window.

While the page content beyond the title has not been publicly disclosed, the combination of a brand‑related title, low trust scores, and multiple vendor detections provides sufficient confidence to treat the domain as malicious. Defenders should add the domain and its resolving IP address to DNS‑based and HTTP‑based blocklists, monitor for any resurgence of the host under alternative subdomains, and enforce endpoint policies that flag attempts to interact with crypto‑related URLs linked to the domain. Continuous threat‑intel feeds should be consulted for any emerging indicators that associate the same IP or certificate with new abuse campaigns.