rollbitcasino[.]top

The domain rollbitcasino.top was registered on February 21, 2026 through Web Commerce Communications Limited and is served by Cloudflare infrastructure. DNS resolution points to the IP address 172.67.143.194, which belongs to ASN 13335 (Cloudflare, Inc.) and is geolocated in the United States. The site employed a Google Trust Services certificate issued for the WE1 trust store, indicating that TLS termination was handled by Cloudflare’s edge. The page title returned from the host reads "ROLBITCASINO | Open the world of luck and rewards!", and the hosting environment is identified as a "Gambler Scam" kit, consistent with a crypto‑ gambling phishing campaign.

The domain appears on a single security blocklist and was actively blocked by the PhishDestroy service, which has now taken the site offline. Reputation scoring services report a Gridinsoft trust score of zero out of one hundred, reflecting a complete lack of trust. VirusTotal analysis shows that two of ninety‑five scanning engines flagged the domain, reinforcing the malicious classification. No additional public intelligence such as Safe Browsing or OTX identifiers is present.

Because the site is currently offline, any live content inspection is not possible, and the exact phishing payload or credential‑capture mechanisms remain unverified. Defenders should immediately block the domain and its associated IP address at network perimeters, update endpoint and DNS filtering policies, and monitor for any future registrations that reuse the same registrar or nameserver pair (apollo.ns.cloudflare.com and monroe.ns.cloudflare.com). Continuous observation of Cloudflare‑hosted IP ranges for similar phishing kits is advised, as threat actors frequently leverage shared infrastructure to host new campaigns.