roobet7[.]us

The domain roobet7.us was registered on 31 July 2025 via Web Commerce Communications Limited. The authoritative name servers are ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com and ns4.nameserver, and DNS resolution points to IP 69.5.189.58, which belongs to AS42624 Global-Data System IT Corporation and is geolocated in Switzerland. No TLS certificate is presented, indicating the site was served over plain HTTP. The observed page title, 'ROOBET7 | Play at the best online casino based on Blockchain', together with the classification of the campaign as a Crypto Scam and the identification of the Gambler Scam phishing kit, suggests the infrastructure was intended to lure victims into a cryptocurrency‑based gambling operation. The domain is currently offline, as indicated by the status flag, and has been placed on at least one security blocklist.

It is also listed in the PhishDestroy blocklist. VirusTotal analysis recorded nine detections out of ninety‑five scanned engines, reinforcing the malicious assessment. A Gridinsoft trust score of 0 out of 100 provides further quantitative evidence of the site's lack of legitimacy. No SSL certificate, low trust score, and detection by multiple vendors are consistent with typical phishing or scam sites. Uncertainty remains regarding the exact content that was served before takedown, as no HTTP response details or screenshots are available.

Additionally, the absence of further blocklist listings limits the view of broader distribution. Defenders should continue to block traffic to 69.5.189.58 and any subdomains of roobet7.us, update URL filtering policies, and monitor for re‑registration attempts. The registrar information can be used to request takedown or abuse contacts if the domain resurfaces. Ongoing threat‑intel feeds should be consulted for any new indicators associated with the identified phishing kit or related campaigns.