rollbitnederland[.]com

rollbitnederland.com was registered on March 11 2026 through Dynadot LLC. The domain resolves to 172.67.217.4, an address owned by Cloudflare, Inc. (AS13335) and is located in the United States. DNS resolution uses the Cloudflare authoritative nameservers bethany.ns.cloudflare.com and viddy.ns.cloudflare.com. The site presents a valid SSL certificate issued by Google Trust Services under the WE1 root, indicating TLS 1.3 support and a standard certificate chain.

The page title returned by HTTP GET is "Rollbit Nederland - Ontdek het Spannendste Online Casino", and the site is classified as a cryptocurrency‑related scam. Threat intelligence tags the domain as a brand‑impersonation of Ethereum and associates it with the Gambler Scam phishing kit. VirusTotal has flagged the domain by 1 of 95 security vendors, while Gridinsoft assigns a trust score of 0 out of 100. The domain appears on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. AlienVault OTX records the domain in one pulse, further confirming its malicious reputation.

Observations are limited to infrastructure and metadata; no page content, login forms, or malicious payloads have been captured in this analysis. Consequently, the exact mechanism used to lure victims—whether through deceptive advertising, fake deposit pages, or wallet address harvesting—remains unverified. The single VirusTotal detection suggests at least one vendor has identified malicious behavior, but the low detection count leaves the full scope of the threat ambiguous.

Defenders should treat rollbitnederland.com as a high‑risk indicator. Immediate actions include adding the domain to web filtering and DNS blocklists, monitoring outbound connections to the resolved IP, and alerting users about potential Ethereum impersonation attempts. Continuous re‑evaluation is advised, as additional detections or changes to the site’s content could increase the threat profile.