rolly[.]bet

Analysis of the domain rolly.bet shows that it was actively hosting a fraudulent crypto‑casino page titled "Rolly: Most Popular Online Crypto Casino Based on Blockchain" before being taken offline. The site resolved to the IP address 104.21.72.143, which belongs to AS13335 operated by Cloudflare, Inc., and the domain is registered through Cloudflare's registrar service. Both authoritative nameservers, edward.ns.cloudflare.com and shaz.ns.cloudflare.com, are Cloudflare‑managed, confirming the hosting infrastructure. No TLS certificate was presented, indicating the absence of HTTPS encryption.

The site was flagged by multiple security instruments: PhishDestroy listed it as blocked, and it appears on one additional security blocklist. Gridinsoft assigned a trust score of 0 out of 100, reflecting a severely negative assessment. VirusTotal recordings show that 11 of 95 scanning engines flagged the domain, reinforcing the suspicion of malicious activity. The scam classification is recorded as a crypto scam, and the observed phishing kit aligns with a Gambler Scam template, suggesting the operation leveraged gambling‑related lures to target cryptocurrency users.

Current status is offline, which may limit immediate exploitation but does not remove the need for continued monitoring. Defenders should ensure that any remnants of the domain's DNS resolution are blocked at the network perimeter, update web‑filtering and endpoint protection rules to include the observed IP and associated Cloudflare host ranges, and monitor for re‑registration or similar phishing kits targeting crypto gambling themes. Continued collection of threat intelligence on related domains and kits is recommended to detect potential resurgence or copycat campaigns.