rocketbot-latam[.]space

This domain, rocketbot-latam.space, was registered on 21 February 2026 and is presently taken offline. The site presented the page title “Inicio – Rocketbot Software de RPA y automatización de procesos,” indicating an attempt to reference the legitimate Rocketbot RPA solution. The TLS certificate in use is issued by Sectigo RSA Domain Validation Secure Server CA, confirming that a valid SSL certificate was deployed at the time of observation.

The domain appears on a single security blocklist and has been specifically blocked by PhishDestroy, which classifies it as a generic phishing site. VirusTotal records show that the URL was scanned by 95 antivirus and URL‑reputation engines, none of which reported a detection; this absence of alerts does not constitute proof of cleanliness and must be weighed against the blocklist evidence. Because the service is offline, active probing of HTTP responses is not possible, but the combination of a recent registration date, a forged brand‑related page title, a valid SSL certificate, and inclusion on a phishing‑focused blocklist provides sufficient indicators for defensive teams to treat the domain as hostile.

Defenders should ensure that corporate firewalls, DNS filtering solutions, and web‑proxy policies block any resolution or connection attempts to rocketbot‑latam.space, monitor for any resurgence of the domain, and incorporate the observed indicators—such as the SSL issuer, the exact page title, and the blocklist reference—into threat‑intel feeds. Ongoing observation is advised until the investigation concludes.