rolletto-aus[.]com

PhishDestroy identifies rolletto-aus.com as hosting a generic phishing campaign classified under a crypto drainer threat. The domain is currently active and under investigation as of the latest assessment. No specific brand impersonation has been confirmed at this stage, but the site exhibits behaviors consistent with unauthorized cryptocurrency fund extraction mechanisms.

This domain was flagged by 3 of 95 VirusTotal security vendors during the latest scan, indicating a low immediate detection rate despite its malicious classification. It was registered through Fewmoretaps OU, operating under the alias Trustname.com, and resolves to the IP address 188.114.97.3. The domain was created on March 17, 2026, and currently holds no confirmed presence on major blocklists or reputation databases. The SSL certificate, issued by Let's Encrypt, suggests an attempt to establish a facade of legitimacy, which is a common tactic among phishing operators to deceive users.

While this domain remains under active investigation, users are strongly advised to avoid interacting with it, particularly when prompted to connect cryptocurrency wallets or submit financial credentials. The lack of detection on VirusTotal and absence from blocklists do not equate to safety; emerging phishing domains frequently evade initial scans. PhishDestroy recommends verifying the legitimacy of any suspicious domain by cross-checking its reputation score and historical behavior before engaging. Users who suspect exposure should disconnect any connected wallets, scan devices for malware, and report the domain to PhishDestroy for further analysis.