roketbet368[.]com

Analysis of roketbet368.com shows a freshly registered domain (creation date February 23 2026) that is currently offline but was previously resolved to the Cloudflare‑hosted address 185.162.229.2, located in London under ASN 209242. The domain is delegated to four alphadnszone.com name servers (ns1‑ns4.alphadnszone.com) and presents a Google Trust Services / WE1 SSL certificate, indicating a valid TLS handshake. The only visible response was a Cloudflare “Access denied” page with the title “Access denied | roketbet368.com used Cloudflare to restrict access | roketbet368.com | Cloudflare”, confirming the presence of Cloudflare front‑end protection. Threat intelligence flags the site as a crypto‑related phishing operation; it appears on a single security blocklist and is explicitly blocked by PhishDestroy.

VirusTotal recorded a single positive detection out of 93 scanning engines, reinforcing the suspicion. Reputation metrics are extremely low, with Gridinsoft assigning a trust score of 0 / 100. The registrar listed is NiceNIC International Group Co., Limited, a common registrar for malicious infrastructure.

No additional content, payload, or campaign details are publicly available, leaving the exact phishing vector and victim targeting undefined. Defenders should continue to block the IP 185.162.229.2, add the domain and its name‑server set to DNS‑based deny lists, and monitor for re‑appearance on any URL filtering or Safe Browsing feeds. Given the crypto‑scam classification and the elevated risk rating, proactive network‑level enforcement is advised while awaiting any further activity reports.