latam-rocketbot[.]cloud

latam-rocketbot.cloud entered the PhishDestroy evidence set on Jul 30, 2025. Evidence score: 58/100 (elevated).

Positive source (1): VirusTotal. VirusTotal recorded 1 detections among 95 engines: Gridinsoft on May 16, 2026 at 19:09 UTC. Other stored checks: The external blocklist snapshot contained no matches on Aug 7, 2026 at 18:20 UTC. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict on Mar 5, 2026 at 23:30 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 16:30 UTC; content was unavailable. Registration records for the domain list HOSTINGER operations, UAB as the registrar and Jul 26, 2025 as the creation date. Registration preceded first observation by 3 days. DOM analysis completed on Apr 23, 2026 at 19:22 UTC without a scored DOM indicator (0/100); the source-based findings remained positive. The evidence archive retains 1 visual capture from PhishDestroy; no page title was retained, so the captures preserve the landing-page appearance. IoC extraction completed on Aug 3, 2026 at 04:04 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators.

VirusTotal is the only positive source family in the stored checks; the other recorded checks did not corroborate it at their collection times. Stored content fields do not identify a target brand or exact victim interaction.