roketbet385[.]com

The domain roketbet385.com was registered on February 23, 2026 through NiceNIC International Group Co., Limited and currently resolves to the IP address 185.162.229.2. The hosting IP is allocated to AS209242 Cloudflare London, LLC and is geolocated to the Isle of Man. The domain is served without an SSL certificate, indicating that HTTP connections are unencrypted. Nameserver delegation points to dns1.p07.nsone.net, dns2.p07.nsone.net, dns3.p07.nsone.net, and dns4.p07.nsone.net, which are consistent with NSONE's DNS hosting infrastructure.

The page title returned from the site is simply "roketbet385.com/", offering no additional contextual clues. The domain is listed on a single public phishing blocklist, specifically PhishDestroy, and appears on one security blocklist overall. VirusTotal analysis shows that one of ninety‑three security vendors flagged the domain, reinforcing the suspicion of malicious intent. The observed scam type is recorded as a crypto scam, aligning with the generic phishing classification.

At the time of this assessment the domain status is marked as offline, suggesting that the malicious site may have been taken down or is temporarily inactive, but the infrastructure artifacts remain observable. Defenders should treat the domain as hostile: block traffic to the domain and its resolving IP at network perimeters, add the IP to threat intelligence feeds, and monitor for any re‑activation or related sub‑domains that may be spun up using the same nameserver set. Since no SSL certificate or content analysis is available, further investigation would require active probing if the site resurfaces, but current evidence already justifies precautionary blocking.