rollingslots[.]casino

Analysis indicates that rollingslots.casino was registered on February 21 2026 and subsequently taken offline. The domain resolves to IP 104.21.41.90, which is owned by Cloudflare (AS13335) and located in the United States. The authoritative name servers are karl.ns.cloudflare.com and vivienne.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure. No TLS certificate was observed, meaning the site was served without HTTPS encryption. The site’s page title, “Rollingslots: Most Popular Online Crypto Casino Based on Blockchain,” aligns with the listed scam type of a crypto‑related scam.

Infrastructure scans reveal a trust score of 0 out of 100 from Gridinsoft, indicating a highly untrusted profile. Detected front‑end components include React, SweetAlert2, and third‑party CDNs jsDelivr and cdnjs, while the network layer employed HTTP/3 under Cloudflare’s edge. The domain appears on a single security blocklist and has been actively blocked by PhishDestroy. VirusTotal analysis shows that 13 of 93 scanning engines flagged the domain, providing independent confirmation of malicious intent.

The phishing kit associated with the site is identified as the “Gambler Scam” kit, which is commonly used to lure victims into fraudulent cryptocurrency gambling schemes. Given the combination of a newly created domain, lack of TLS, zero trust score, presence on blocklists, detection by multiple AV engines, and association with a known gambling phishing kit, defenders should treat rollingslots.casino as a high‑confidence malicious indicator. Recommended actions include adding the domain and its resolving IP address to network deny lists, enforcing DNS sink‑holing for the associated Cloudflare name servers, and monitoring for any re‑use of the same kit or similar branding in future campaigns. Continuous threat‑intel feeds should be consulted for updates, and any inbound traffic to the domain should be logged and investigated.