rollzy[.]win

The domain rollzy.win has been identified as an active threat through brand impersonation, specifically targeting the online crypto casino and gambling sector. Registered on February 27, 2026, the domain has since been flagged for its association with a phishing kit known as Gambler Scam. The page title found on the site reads, 'Rollzy: Most Popular Online Crypto Casino Based on Blockchain,' indicating an attempt to mislead users into believing they are engaging with a legitimate gaming platform. Infrastructure analysis reveals that the domain is served by Cloudflare, a common hosting service that provides anonymity to potentially malicious entities.

This domain has been listed on two security blocklists, further corroborating its malicious intent. It is currently active, with a Gridinsoft trust score of 0 out of 100, suggesting a high level of risk associated with its operation. Additionally, it has been flagged by 15 out of 95 security vendors on VirusTotal, indicating that numerous cybersecurity solutions recognize it as a threat. The domain resolves to an IP address of 172.67.141.69, which may be shared with other malicious entities, and it has been seen in 24 threat intelligence pulses on AlienVault OTX.

Defenders should take immediate action to block access to rollzy.win across their networks and inform users about the risks associated with this domain. Organizations are advised to monitor their systems for any signs of attempted phishing related to this domain and educate employees on identifying counterfeit websites posing as credible brands. Continuous monitoring of related infrastructure and domains may also be necessary, as threat actors often use multiple domains to execute their scams.