rollsy[.]cc

This domain, rollsy.cc, is identified as a high-risk brand impersonation site targeting Base, a blockchain platform. Analysis indicates the domain is currently active and designed to deceive users into engaging with a fraudulent online casino presented as blockchain-based. The page title explicitly states 'ROLLSY | Play at the best online casino based on Blockchain,' leveraging the Base brand to lend credibility to the scam operation. Infrastructure analysis reveals rollsy.cc was registered on December 14, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to IP address 104.21.18.79, hosted on AS13335 (Cloudflare, Inc.) in the United States. Security vendors have flagged the domain, with 8 out of 95 VirusTotal engines detecting malicious activity. The domain appears on one security blocklist and is currently blocked by at least one security provider. The SSL certificate is issued by Google Trust Services (WE1), a common feature in both legitimate and malicious sites leveraging Cloudflare services. Current status confirms rollsy.cc remains active, posing a continued threat to users. Organizations and individuals are advised to block the domain at the network level and include its IP address (104.21.18.79) in firewall deny lists. End users should be alerted to avoid interacting with the site, particularly those associated with Base or blockchain-related activities. Security teams are recommended to monitor for related domains registered through the same registrar, NICENIC INTERNATIONAL GROUP CO., LIMITED, and to correlate with other indicators of compromise associated with this threat cluster.