rainbet-br[.]br[.]com

rainbet-br.br.com is currently active and resolves to the IP address 188.114.97.3. The domain is delegated to Cloudflare name servers dora.ns.cloudflare.com and oswald.ns.cloudflare.com, indicating the use of Cloudflare's DNS and possibly its CDN services. Threat intelligence platforms have flagged the domain as a phishing site. Three of ninety‑one VirusTotal scanners have returned positive detections, and the domain appears on three public blocklists.

It is also listed as blocked by the PhishDestroy, MetaMask, and SEAL blocklist feeds, reinforcing its malicious reputation. No additional public data such as a page title, SSL certificate details, HTTP response code, or Safe Browsing verdict is presently available, leaving the exact content of the site unverified. The lack of further infrastructure signals, such as ASN or registrar information, limits deeper attribution.

Analysts should treat the domain as high‑risk and proactively block traffic to 188.114.97.3 or to the domain name itself at network perimeter and endpoint security solutions. Monitoring of the associated Cloudflare name servers for any changes, and periodic re‑scanning with VirusTotal or similar multi‑engine services, is recommended to capture potential evolution of the threat. Organizations employing phishing‑detection tools should add rainbet‑br.br.com to their deny lists and consider sharing any new indicators of compromise with the broader security community.