MALICIOUS — CRITICAL
rainbetslots[.]net
Analysis of the domain rainbetslots.net indicates it is actively hosting a phishing site targeting online gambling users as of July 19, 2026.
- VirusTotal
- 4/91
- Blocklists
- 2 · MetaMask, SEAL
- Verfügbarkeit
- Letzter bekanntermaßen aktiv · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
rainbetslots.net — Letzter bekanntermaßen aktiv (HTTP 200). Betrugstyp: Gambling. Zusammenfassung der Beweislage: VirusTotal 4/91 (ChainPatrol, alphaMountain.ai, Gridinsoft, SOCRadar); Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 78/100. Registrar: Spaceship.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
Evidence Analysis
Analysis of the domain rainbetslots.net indicates it is actively hosting a phishing site targeting online gambling users as of July 19, 2026. The domain resolves to IP address 69.165.75.129, located in Hong Kong and associated with VpsQuan L.L.C. Nameservers are hosted by Spaceship, Inc. (launch1.spaceship.net and launch2.spaceship.net), the same entity through which the domain was registered. The site returns an HTTP 200 status, confirming it is operational, and presents a page title explicitly referencing RAINBETSLOTS - PLATAFORMA OFICIAL, suggesting an attempt to impersonate an official gambling platform. Security vendors have flagged the domain, with 4 of 91 engines on VirusTotal detecting malicious activity. It appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites, providing no definitive indication of intent. No specific phishing kit or targeted brand beyond the page title has been confirmed in available data. Defenders should treat this domain as high-risk infrastructure. Blocking the domain and IP address at the network level is recommended, along with monitoring for related DNS resolutions or SSL certificate issuances under the same registrar. Further analysis of the site’s content and backend infrastructure may reveal additional indicators of compromise or connections to broader phishing campaigns.
Datenabdeckung12 recorded checks
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Status der öffentlichen Sperrliste
Domain-Intelligenz
Technische DetailsDNS, SSL-SANs, Zeitstempel
ICANN OVERSIGHT
Akkreditierung und RAA-Kontext
Akkreditierung und RAA-Kontext
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
Technologien · 5 identified
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 100 % KonfidenzJSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com 100 % KonfidenzHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100 % KonfidenzHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100 % KonfidenzVirusTotal-Analyse
Website-Performanceanalyse
Google PageSpeed Insights — mobile performance audit of rainbetslots.net · checked Jul 19, 2026
Nachweise und externe BerichteIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.