roobet-casino[.]us

The domain roobet-casino.us was registered through NameCheap, Inc. on February 21, 2026 and is currently active. Infrastructure analysis shows the domain resolves to IP address 188.114.96.3, which belongs to AS13335 operated by Cloudflare, Inc. The authoritative nameservers are fatima.ns.cloudflare.com and terry.ns.cloudflare.com, confirming Cloudflare as the DNS and CDN provider. The site presents a page titled "Roobet Casino - Experience Exciting Online Gaming with Exclusive Bonuses" and serves content over HTTPS using a certificate issued by Google Trust Services under the WE1 root, indicating a valid TLS handshake. An HTTP GET returns status code 200, confirming the web service is reachable.

Technical fingerprints reveal a WordPress stack backed by MySQL and PHP, with HTTP/3 support, all typical of a publicly hosted site. Threat intelligence flags the domain as a high‑risk, generic phishing indicator linked to a crypto‑gambling scam kit labeled "Gambler Scam". Twelve of ninety‑three VirusTotal scanners flagged the domain as malicious, and the domain appears on three public blocklists. Gridinsoft assigns a trust score of 0 out of 100, and AlienVault OTX cites the domain in one threat pulse.

Additionally, the domain is blocked by PhishDestroy, MetaMask, and SEAL, reinforcing its malicious classification. Given the combination of registrar details, Cloudflare hosting, low trust scores, multiple vendor detections, and active blocklist listings, defenders should treat roobet-casino.us as a confirmed phishing infrastructure. Recommended mitigations include adding the domain to URL filtering policies, monitoring for DNS queries to the associated IP, and alerting on any outbound connections that attempt to resolve or contact the domain. Continuous re‑evaluation is advised, as the threat actor may modify hosting or page content, but current evidence supports immediate blocking and investigation.