Security Scan Report: roll2win.net

Redirected to:
https://roll2win.net/auth/second
Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 4 domains to perform 33 HTTP transactions. The main domain is roll2win.net and was registered 4 months ago.

Submitted URL: https://roll2win.net/

Effective URL:
https://roll2win.net/auth/second
Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Newly registered (122-day) slots/bonus site with its own sign-up form. No threat-intel, YARA, IDS or impersonation signals, but reputation, licensing and operator identity are unverified — proceed cautiously.

Risk Factors (4)
Recently registered domain (122 days) with no established reputation
Gambling/slots site offering sign-up bonuses, a vertical with elevated consumer risk
Account registration collects email and password on an unverified operator
No visible licensing, ownership or responsible-gambling information on the captured page
Safety Factors (4)
Self-branding confirmed: page title/meta use 'Roll2win', matching its own domain — no impersonation of another entity
Form posts same-origin; no cross-origin credential submission or exfiltration detected
No threat-intelligence matches, no JavaScript malware, no network IDS alerts
No payment-card fields collected at this step
Domain age information unavailable

Details

Page Title

Roll2win: Create an Account

Scan Type

public

Domain Name Analysis

The domain name 'roll2win.net' uses the network infrastructure generic top-level domain (.net) while skipping any subdomain. The registrable portion 'roll2win' spans 8 characters containing 2 vowels alongside five consonants, along with one digit. Splitting it apart reveals 3 words: roll, 2, win. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://roll2win.net/

Page Load Overview

2.58s
Total Load Time
954 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:484 chars
Detector Agreement:75%

Website Classification

Primary Category

entertainment media56% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
56%
gambling betting
35%
technology software
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8104.21.64.171Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
5100.21.219.30Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
5157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
5172.67.187.48Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
552.88.106.115Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
336--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T134920A683113626F623755E5B5A3AB2C208AE30FD833DC1CB3D891B52FC9DD88C93599

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:1cTnSownBhIqB3dKhj0Shj0ezVxj0SNXSjRS8J7shcP52k2121Td:0nZc3ohj0yj0eHj0StSjbJ7sWUVg1Td

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:19342:sACYCBZ4ZrCAgC4aANgVIJDDwFs0hoRBAIlDQBIwQCxAisDWIKMC+wgAAmiBAoSSiIkCiFQKxwMBEEIk8E7oAIEfvBCwO0Ss

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f8f8f0e0e4000000
Perceptual Hash:e3e3cc309e2ed8d0
Difference Hash:00c3c34a8c0d2270
Wavelet Hash:fff9fbf0e6c00000
Color Hash:#40acbf

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data