roobet-rewards[.]com
“Roobet Crypto Casino | Best Bitcoin Casino & Online Slots”
roobet-rewards.com — 未验证. 品牌冒充:Bitcoin; 诈骗类型:Brand Impersonation. 证据摘要: VirusTotal 7/91 (alphaMountain.ai, CRDF, CyRadar, Fortinet, Gridinsoft); URLQuery 3 alerts; Spamhaus DBL_SPAM; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 85/100. 注册商: NameSilo.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
PhishDestroy identifies the domain roobet-rewards.com as an active brand impersonation site masquerading as the legitimate Roobet crypto casino. The malicious infrastructure specifically targets Bitcoin-related users by mirroring the brand’s established online presence, including a deceptive page title identical to the authentic Roobet platform: 'Roobet Crypto Casino | Best Bitcoin Casino & Online Slots'. Current forensic analysis confirms the domain is still operational and remains unresolved for takedown.
This domain was flagged by 5 of 95 VirusTotal vendors as of the latest scan, indicating it has not yet been widely recognized by automated detection systems. Technical reconnaissance reveals the domain resolves to IP address 158.94.209.129 and is registered through NameSilo, LLC. The certificate authority observed is Let's Encrypt, and historical WHOIS data indicates the domain was created on May 06, 2026. A domain age of less than one day suggests a recently deployed campaign likely designed for short-lived operations. There are currently no known entries in public blocklists or threat intelligence feeds.
Security teams are strongly advised to immediately block roobet-rewards.com at the DNS, firewall, and endpoint levels. Users accessing crypto platforms should verify domain legitimacy through official channels and avoid interacting with unsolicited links. Implement strict TLS inspection to monitor certificate issuance for roobet-rewards.com or related variants. Monitor network traffic for connections to 158.94.209.129 and flag any Bitcoin-related credentials entered on this domain. This advisory will be updated as new intelligence emerges.
网络安全情报 Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | roobet.com/assets/cllurwyv.js |
malware | Detects SocGholish obfuscated variant first observed in July 2022 |
| OpenDNS | roobet-rewards.com |
phishing | Phishing Block |
| DNS4EU | roobet-rewards.com |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
所用技术 · 12 identified
Proton Mail is the world’s largest secure email service with over 70 million users. Available on Web, iOS, Android, and desktop. Protected by Swiss privacy law.
proton.me 置信度 100%Zendesk is a cloud-based help desk management solution offering customizable tools to build customer service portal, knowledge base and online communities.
zendesk.com 置信度 100%theTradeDesk is an technology company that markets a software platform used by digital ad buyers to purchase data-driven digital advertising campaigns across various ad formats and devices.
www.thetradedesk.com 置信度 100%SendGrid is a cloud-based email delivery platform for transactional and marketing emails.
sendgrid.com 置信度 100%reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.
www.google.com 置信度 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 置信度 100%Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.
www.google.com 置信度 100%Google Analytics is a free web analytics service that tracks and reports website traffic.
google.com 置信度 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 置信度 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 置信度 100%VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。