rollblocktoken[.]xyz

This report analyzes the domain rollblocktoken.xyz, which is currently offline. The site's page title, "Just a moment...", is consistent with a generic holding page or a failed load screen. The domain is flagged for impersonating the cryptocurrency brand OKX, classifying it as a cryptocurrency scam threat. Such sites typically attempt to trick users into connecting their digital wallets, revealing private keys, or sending funds to attacker-controlled addresses under the guise of a legitimate platform.

Technical analysis provides concrete evidence of malicious intent. On VirusTotal, the domain has 5 detections out of 95 security vendors. It is specifically flagged by alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, Fortinet, and Gridinsoft, and appears on 1 blocklist. The domain was registered on 2025-09-14 through OwnRegistrar, Inc. It resolves to IP address 104.21.20.94, located in the United States and hosted by AS13335 Cloudflare, Inc. The domain uses nameservers hazel.ns.cloudflare.com and lennox.ns.cloudflare.com, and has no SSL certificate configured.

The current status of rollblocktoken.xyz is DOWN/OFFLINE, meaning the site is not accessible. GridinSoft assigns a trust rating of 0 out of 100, indicating a high-risk, untrustworthy domain. Given the impersonation of a major cryptocurrency brand, the confirmed detections by multiple security vendors, and the absence of SSL, this domain presents a significant risk and should be blocked.