rollon[.]bet

This domain, rollon.bet, is flagged for brand impersonation targeting the online crypto gambling sector. Analysis indicates the site masquerades as a legitimate blockchain-based casino, using the page title 'Rollon: Most Popular Online Crypto Casino Based on Blockchain' to deceive users into engaging with fraudulent gambling services. The domain exhibits no direct evidence of a drainer kit but employs social engineering tactics to exploit trust in cryptocurrency gambling platforms. Infrastructure analysis reveals the domain was registered on December 29, 2025, through NiceNIC International Group Co., Limited. It resolves to the IP address 104.21.3.42, hosted on Cloudflare’s network (AS13335) in the United States. Detection metrics show 17 out of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on a single security blocklist. The domain lacks an SSL certificate, further degrading its perceived legitimacy. No entries were found in Google Safe Browsing at the time of analysis. The domain has since been taken offline, reducing immediate exposure to end users. However, the infrastructure remains a residual risk, as the registrar and hosting provider have not been confirmed to have taken enforcement actions. Users who interacted with the domain prior to its deactivation may still be vulnerable to follow-up phishing attempts or credential theft. Organizations are advised to monitor for related domains registered under the same registrar or resolving to the identified IP range, as threat actors frequently reuse infrastructure across campaigns.