rainbet-fi[.]net

Analysis of rainbet-fi.net indicates that the domain is currently active and was created on July 21, 2026. The registrar listed is Cloudflare, Inc., and the authoritative nameservers are leif.ns.cloudflare.com and raphaela.ns.cloudflare.com, both operated by Cloudflare. DNS resolution points to the IP address 188.114.97.3, which belongs to Cloudflare’s edge network, a common hosting choice for rapid‑deployment malicious sites.

The domain appears on three security blocklists and has been flagged by the PhishDestroy, MetaMask, and SEAL blocklists, confirming that multiple threat‑intelligence feeds have identified it as malicious. VirusTotal records show that the domain was scanned by 91 antivirus and URL‑reputation vendors, and none have issued a detection at the time of this assessment; however, the absence of a detection does not constitute evidence of benign intent. No additional data such as page title, SSL certificate details, HTTP response codes, Safe Browsing status, or Open Threat Exchange entries are available, leaving the exact content and payload of the site unverified.

Given the high‑risk rating, the recent creation date, and the presence on multiple blocklists, defenders should treat rainbet-fi.net as a probable phishing infrastructure. Recommended mitigation steps include adding the domain to local deny lists, ensuring network gateways block traffic to the IP 188.114.97.3, monitoring DNS queries for the domain, and maintaining vigilance for any future intelligence that may disclose the targeted brand or credential‑stealing mechanisms. Continuous re‑scanning with URL‑reputation services is advised to capture any emerging detections.