robet[.]us

Analysis indicates that the domain robet.us was registered on 21 February 2026 through CNOBIN INFORMATION TECHNOLOGY LIMITED. The site resolves to the Cloudflare‑owned address 188.114.97.3 (AS13335, United States) and is served by the authoritative nameservers galilea.ns.cloudflare.com and melnicoff.ns.cloudflare.com. An HTTPS endpoint is present, using a Let’s Encrypt certificate (R13), which does not provide any indication of legitimacy. The HTTP response code is 200, confirming that the web server delivers content without redirection. The page title returned by the server is “Robet: Most Popular Online Crypto Casino Based on Blockchain”, which aligns with the classification of a crypto‑related scam.

Intelligence sources label the underlying infrastructure as the “Gambler Scam” phishing kit, and the threat is identified as a crypto casino phishing operation. The domain has been added to a single security blocklist and is actively blocked by the PhishDestroy service, yet it remains reachable. Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, indicating extreme suspicion. VirusTotal analysis shows that 12 of 93 scanned security vendors flag the domain, reinforcing the malicious assessment. No additional public intelligence such as Safe Browsing or OTX entries were provided.

Uncertainty remains regarding the exact payload delivered to victims, as the site content has not been publicly dissected, and no indication of credential‑stealing forms or malware drops is available in the current data set. Defenders should therefore treat any traffic to robet.us as malicious. Recommended actions include blocking the domain at DNS and proxy layers, adding the IP address 188.114.97.3 to network deny lists, and ensuring that TLS inspection does not inadvertently trust the Let’s Encrypt certificate for this host.