roobets[.]io

Analysis of roobets.io shows a high‑risk, active gambling‑related phishing operation. The domain was registered on February 21, 2026 and resolves to IP 82.25.96.19, located in Germany and owned by AS47583 Hostinger International Limited. DNS is served by ns1.dns-parking.com and ns2.dns-parking.com. The site presents the page title "Roobet – Best Crypto Casino Gaming and Sports Betting (2025)" and runs on a WordPress stack with MySQL, PHP, Yoast SEO, LiteSpeed, Hostinger hosting, and HTTP/3. An SSL certificate from Let’s Encrypt (R12) is active, and the Gridinsoft trust score is 0/100, indicating extreme distrust. The infrastructure matches the publicly known "Gambler Scam" phishing kit. The domain is already blocked by PhishDestroy, MetaMask, and SEAL, appears on three security blocklists, and one of ninety‑five VirusTotal scanners has flagged it. Despite these indicators, the exact page content has not been captured, leaving the visual lure and credential‑harvesting mechanisms unverified. Defenders should add roobets.io to domain blocklists, monitor DNS queries for the associated nameservers, and consider sinkholing the IP address. Continuous re‑evaluation is advised, as the site may evolve its payload or target additional cryptocurrency‑focused audiences.