rollchain[.]vip

PhishDestroy identifies rollchain.vip as an active brand impersonation phishing domain targeting Base cryptocurrency users. This site poses a direct financial threat by masquerading as a legitimate crypto casino, using blockchain terminology to lure victims into depositing funds into attacker-controlled wallets. The threat actor behind rollchain.vip leverages Base’s brand recognition to deceive users into connecting their wallets or submitting private keys, resulting in irreversible asset theft. Technical analysis confirms this domain is not affiliated with Base and operates solely to harvest cryptocurrency under false pretenses. This domain was flagged by PhishDestroy after being detected impersonating Base, the Ethereum Layer 2 network. rollchain.vip resolves to IP 172.67.128.163 and was registered through Dynadot Inc on March 01, 2026. Only 2 out of 95 security vendors on VirusTotal currently flag this domain, highlighting the stealth and recency of the threat. Despite its low detection rate, the page title clearly states “Rollchain: Most Popular Online Crypto Casino Based on Blockchain,” a fabricated claim designed to build credibility and facilitate crypto drainer operations. The use of a Let’s Encrypt SSL certificate further enhances the illusion of legitimacy, tricking users into believing the site is safe. Users who have visited rollchain.vip should immediately disconnect their wallets, revoke any connected permissions, and transfer remaining funds to a secure wallet. Never enter private keys, seed phrases, or connect wallets on untrusted sites. Report the domain to PhishDestroy and your wallet provider. If you entered credentials or connected a wallet, assume compromise and transfer assets immediately. Always verify URLs, check for HTTPS, and consult PhishDestroy’s real-time blocklist before interacting with crypto-related platforms.