rogbo[.]bet

This domain, rogbo.bet, is flagged as a brand impersonation threat specifically targeting online crypto casino and gambling platforms. Analysis indicates the site masquerades as a legitimate blockchain-based gambling service, using the page title 'Rogbo: Most Popular Online Crypto Casino Based on Blockchain' to deceive users into engaging with fraudulent transactions or credential submission. The domain exhibits no direct evidence of a crypto drainer kit but employs social engineering tactics typical of high-risk gambling impersonation schemes. Infrastructure analysis reveals concrete technical indicators associated with rogbo.bet. The domain is registered through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 172.67.192.176, hosted on Cloudflare’s network (AS13335). It was created on February 21, 2026, an anomalous future date suggesting potential domain spoofing or registry manipulation. Security vendors on VirusTotal flagged the domain at a 17/95 detection rate, while it appears on one security blocklist. The SSL certificate is issued by Google Trust Services (WE1), a common but not exclusive indicator of legitimacy, often exploited by threat actors to lend false credibility. Currently, rogbo.bet is offline, reducing immediate exposure risk. However, the domain’s infrastructure remains intact, and its registration persists, indicating potential for reactivation or reuse in future campaigns. Response actions should include monitoring for DNS reactivation, analyzing historical WHOIS records for patterns, and alerting users of blockchain gambling platforms to verify domain authenticity before engaging. The elevated risk level stems from the domain’s targeted impersonation of high-value crypto transactions, where user losses can be irreversible. Organizations and individuals are advised to block resolution to 172.67.192.176 and treat any future activity from this domain as malicious.