rollvex[.]org

Analysis of rollvex.org indicates a high-risk crypto scam domain targeting users with fraudulent online gambling services. The domain, registered on February 21, 2026, through HOSTINGER operations, UAB, was taken offline by the time of this assessment. Infrastructure analysis reveals Cloudflare-hosted nameservers (amy.ns.cloudflare.com, dean.ns.cloudflare.com) and resolution to IP 188.114.96.3, part of AS13335 (Cloudflare, Inc.) in the US. No SSL certificate was detected, increasing exposure to interception risks.

The page title, 'Rollvex: Most Popular Online Crypto Casino Based on Blockchain,' explicitly identifies the scam type as a crypto gambling scheme, aligning with the 'Gambler Scam' phishing kit classification. Security vendor detections further corroborate malicious intent: 14 of 93 engines on VirusTotal flagged the domain, and it appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. The absence of an SSL certificate, combined with Cloudflare’s infrastructure, suggests an attempt to obscure hosting origins while maintaining low operational costs. The domain’s rapid takedown may indicate proactive mitigation, though historical resolution to Cloudflare’s IP range could facilitate future re-emergence under similar schemes.

Defenders should treat this domain as confirmed malicious, prioritizing blocking at DNS and proxy levels. Monitoring for re-registration or associated IPs (e.g., 188.114.96.3) is recommended, alongside cross-referencing the 'Gambler Scam' kit for related indicators. Given the crypto-centric nature of the scam, wallet addresses or transaction hashes linked to rollvex.org—if recovered from historical scans—should be flagged in blockchain analytics tools. No visual or behavioral analysis of the site is available; further forensic evidence would require archived captures or incident response data.