rolldistrict[.]world

The domain rolldistrict.world was registered on 21 February 2026 through NiceNIC International Group Co., Limited and is hosted on Cloudflare’s network (AS13335) at IP 188.114.96.3, which resolves to a United States location. The site presented the page title “Rolldistrict: Most Popular Online Crypto Casino Based on Blockchain”, indicating a crypto‑casino theme. Public threat feeds associate the domain with the “Gambler Scam” phishing kit and record that it has been blocked by the PhishDestroy service. VirusTotal analysis shows that 13 of 93 scanning engines flagged the domain, providing a moderate detection signal.

The domain appears on a single external blocklist and, as of the report date 23 July 2026, has been taken offline. No SSL certificate was observed, and the authoritative nameservers are paloma.ns.cloudflare.com and sullivan.ns.cloudflare.com. The single blocklist entry suggests limited exposure, but the multiple vendor detections indicate that the landing page shares characteristics with known malicious campaigns. The lack of HTTPS also allows potential interception of traffic, increasing risk to any credentials or payment data entered.

Defenders should add the domain and its IP address to denylists, monitor for re‑use of the same Cloudflare hosting configuration, and enforce outbound filtering that blocks connections to this IP unless explicitly required. Security teams should ensure TLS inspection is active for outbound traffic to detect similar clear‑text phishing attempts, and update detection signatures to include identifiers linked to the “Gambler Scam” kit. At present, the primary uncertainty is whether the phishing infrastructure has been redeployed under a different domain or sub‑domain; therefore, correlation with other gambling‑related phishing campaigns and continuous re‑scanning of the indicator are recommended.