# PhishDestroy domain threat record: playrainbet.cc Content language: English Canonical HTML report: https://phishdestroy.io/domain/playrainbet.cc/ Machine-readable companion: https://phishdestroy.io/domain/playrainbet.cc/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 13:05:54 UTC - Last availability or vendor check: 2026-10-22 13:05:54 UTC - Stored record updated: 2026-10-22 16:30:29 UTC - VirusTotal detections in the stored snapshot: 2/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: Bitcoin - Phishing kit: Gambler Scam ## Stored infrastructure - Observed IP address: 188.114.96.3 - Registrar in stored WHOIS data: Eranet International Limited - Registrar country in stored WHOIS data: US - Last stored HTTP status: 200 - Registration date (registry RDAP, playrainbet.cc): 2026-10-15 23:40:16 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a163b5-f7d8-778e-bf01-5ee805019270/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/playrainbet.cc - Certificate Transparency search: https://crt.sh/?q=%25.playrainbet.cc - Web Archive lookup: https://web.archive.org/web/*/https://playrainbet.cc/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s automated intake flagged playrainbet.cc because VirusTotal reported a malicious detection while the domain was only six days old. The recorded page title reads “Crypto Casino – Play Slots, Live Dealer & Originals with Bitcoin – Rainbet”, indicating an attempt to present a Rainbet‑branded crypto casino. The site returned HTTP 200 when fetched on 2026-10-22, the same day it was first seen by PhishDestroy. How the scam works Crypto‑casino impersonation sites copy the branding of legitimate gambling platforms to lure users into depositing cryptocurrencies. After a deposit, the operators typically disappear or use wallet approvals to drain the funds, leaving victims without winnings or access to their assets. Evidence VirusTotal flagged the domain as malicious on 2026-10-22, reporting one malicious detection from Forcepoint ThreatSeeker in the intake check and two malicious detections (Forcepoint and CRDF) in a later scan, out of 92 engines. Google Safe Browsing did not flag the domain on the same date. urlscan.io’s engine marked the page as malicious with a score of 98, though its overall verdict was neutral. External blocklists MetaMask and SEAL list the domain, and PhishDestroy’s internal blocklist marks it as malicious. OTX recorded four pulses referencing playrainbet.cc as of 2026-10-22. Infrastructure The domain was registered with Eranet International Limited on 2026-10-15 (creation date 2026-10-16), making it about a week old at first sighting. Hosting is provided through Cloudflare, with recorded IP addresses 188.114.96.3 and 188.114.97.3, and the TLS certificate from Let’s Encrypt is valid until 2027-01-13. The Cloudflare network is identified as CloudFLARENET‑EU and the recorded country for the IP is GB. What to do Avoid visiting the site or depositing any cryptocurrency. Users who may have entered credentials should change passwords and monitor accounts for unauthorized activity. Defenders should block playrainbet.cc and its recorded IPs at the network perimeter and review logs for any connections to this domain or its Cloudflare endpoints. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a163b5-f7d8-778e-bf01-5ee805019270/ Cloudflare Radar report: https://radar.cloudflare.com/scan/0f15273e-f9a6-4e31-89c3-8b75744991f8 URLQuery report: https://urlquery.net/report/ba54016f-724e-4106-a4c7-5cf2ab37d28f Stored capture screenshot: https://i.ibb.co/qY2chRyB/3ad33c8cded5.png Cloudflare Radar screenshot (2026-10-22T13:41:54Z): https://screenshots.phishdestroy.io/cf/0f15273e-f9a6-4e31-89c3-8b75744991f8.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/ba54016f-724e-4106-a4c7-5cf2ab37d28f.png VirusTotal report: https://www.virustotal.com/gui/domain/playrainbet.cc Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=playrainbet.cc Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 14:49:51 UTC ## Stored page captures - Primary capture: https://i.ibb.co/qY2chRyB/3ad33c8cded5.png Captured: 2026-10-22 13:05:54 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a163b5-f7d8-778e-bf01-5ee805019270.png Captured: 2026-10-22 13:05:54 UTC Source report: https://urlscan.io/result/01a163b5-f7d8-778e-bf01-5ee805019270/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/0f15273e-f9a6-4e31-89c3-8b75744991f8.png Captured: 2026-10-22 13:41:54 UTC Source report: https://radar.cloudflare.com/scan/0f15273e-f9a6-4e31-89c3-8b75744991f8 SHA-256: 7faadf8444099c2c8d25d751dd6cb65e2373e5f4a53c97efee750dbb9140f7a4 - URLQuery: https://screenshots.phishdestroy.io/uq/ba54016f-724e-4106-a4c7-5cf2ab37d28f.png Source report: https://urlquery.net/report/ba54016f-724e-4106-a4c7-5cf2ab37d28f SHA-256: da69e63ee4e090c1491045a3c7122a816dfbcee40fcdfd94cb9250a690d63ce6 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T13:45:23Z", "uuid": "01a163b5-f7d8-778e-bf01-5ee805019270", "scanned_at": "2026-10-22T13:04:00Z", "final_url": "https://playrainbet.cc/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://playrainbet.cc/", "from": "http://playrainbet.cc/", "status": 307 } ], "ip": "188.114.97.3", "domains": [ "static.raincdn.com" ], "ips": [ "104.18.42.227", "188.114.97.3" ], "asns": [ "13335" ], "link_domains": [ "rainbet.com", "t.me", "x.com", "www.instagram.com", "verification.anjouangamingboard.org", "gamecheck.com" ], "social": [ "https://t.me/rainbetcom", "https://x.com/rainbetcom", "https://www.instagram.com/rainbetcom" ], "doc_hash": "db69b8e95fd9b45d1d28e19bf170f83e107a2f895a75ca359867cfbc8b384b5a", "script_hashes": [ "5ec5b582bac03693235114568f0409bb67870dd7aa947d5cce85fcbe04c8cd1b", "2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8", "adffc236872c783291cbb174b544c7cd6752a922ce968c13cb38302e55ba7fb6" ], "globals": [ "__rbAllowed", "__rbBuild", "__rbE", "_0x19469a", "_0x5423", "_0xd15c", "qrcode", "__GLUE2__", "__cfgReady", "rbTrack", "applyCryptoDepositConfig", "__openDepositModal", "__BONUS_PERCENT", "__openBonusModal", "LIVEFEED_DATA", "__appConfig", "__cdEpoch", "__clockOffset", "bonusPromoConfig" ], "cookies": [ "__cf_bm" ], "tls": { "san": [ "*.playrainbet.cc", "playrainbet.cc" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "playrainbet.cc", "protocol": "QUIC", "valid_to": "2027-01-13T22:45:48Z", "valid_from": "2026-10-15T22:45:49Z" }, "domain_age_days": 3, "apex_age_days": 3, "tls_age_days": 6, "tls_valid_days": 89, "requests": 244, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-frame-options": "DENY", "x-content-type-options": "nosniff\nnosniff", "referrer-policy": "strict-origin-when-cross-origin\nstrict-origin-when-cross-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T13:45:25Z", "uuid": "0f15273e-f9a6-4e31-89c3-8b75744991f8", "scanned_at": "2026-10-22T13:41:54Z", "final_url": "https://playrainbet.cc/", "status": 200, "history": [ { "url": "https://playrainbet.cc/", "status": 200 } ], "dom_hash": "2b14c4a4dea2e31fb4c72060c8bd11d62ed78cd99a15fdaba2908fdcb1e5fd8a", "doc_hash": "881d159c44d2a81c2ae7d0b0c868032a4e15aa32f484c423db37d8e21de2bf74", "phishing_v2": [ "phishing" ], "domain_risks": [ "Newly Seen Domains", "Security Risks" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "playrainbet.cc", "type": "A", "value": "188.114.97.0" }, { "name": "playrainbet.cc", "type": "A", "value": "188.114.96.0" }, { "name": "playrainbet.cc", "type": "AAAA", "value": "2a06:98c1:3121::" }, { "name": "playrainbet.cc", "type": "AAAA", "value": "2a06:98c1:3120::" } ], "dnssec_valid": false, "ip": "188.114.97.0", "whois": { "registrar": "Eranet International Limited", "created": "2026-10-15T23:40:16Z", "updated": "2026-10-15T23:40:16Z", "expires": "2027-10-15T23:40:16Z", "nameservers": [ "lorna.ns.cloudflare.com", "maciej.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T14:46:09Z", "analysis_at": "2026-10-22T11:05:32Z", "stats": { "timeout": 0, "harmless": 52, "malicious": 2, "suspicious": 0, "undetected": 38 }, "detections": { "CRDF": "malicious", "Forcepoint ThreatSeeker": "malicious" }, "reputation": 0, "registrar": "ERANET INTERNATIONAL LIMITED", "created": "2026-10-16T07:40:16Z", "expires": "2027-10-15T23:40:16Z", "updated": "2026-10-16T00:00:00Z", "first_seen": "2026-10-16T02:35:42Z", "dns": [ { "ttl": 300, "type": "A", "value": "172.67.162.13" }, { "ttl": 21600, "type": "NS", "value": "maciej.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3031::6815:294b" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3031::ac43:a20d" }, { "ttl": 300, "type": "A", "value": "104.21.41.75" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "lorna.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "lorna.ns.cloudflare.com" } ], "dns_at": "2026-10-22T11:23:00Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.playrainbet.cc", "playrainbet.cc" ], "issuer": "Let's Encrypt / YE1", "serial": "679527897cb62adf9144cdf0574a05936ea", "sha256": "b4a5452a91dbe8bad7d7c091512727f6dd7107c8637026340133211013eb1a7b", "subject": "playrainbet.cc", "valid_to": "2027-01-13T22:45:48Z", "valid_from": "2026-10-15T22:45:49Z" }, "whois": { "registrar": "ERANET INTERNATIONAL LIMITED", "registrar_iana_id": "1868", "registrar_url": "http://www.eranet.com", "created": "2026-10-15T23:40:16Z", "updated": "2026-10-15T23:40:16Z", "expires": "2027-10-16T00:00:00Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "lorna.ns.cloudflare.com", "maciej.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "expiration": "2027-10-15T16:00:00Z", "last changed": "2026-10-15T16:00:00Z", "registration": "2026-10-15T23:40:16Z", "registrar expiration": "2027-10-15T16:00:00Z", "last update of RDAP database": "2026-10-16T02:35:31Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T13:45:47Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "playrainbet.cc" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-22T13:10:52Z", "first": "2026-10-16T07:57:26Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.16, "avg_page_bytes": 541739 }, "social_tags": { "ogUrl": "/casino", "title": "Crypto Casino - Play Slots, Live Dealer & Originals with Bitcoin - Rainbet", "ogType": "website", "robots": "noindex", "ogImage": "https://static.raincdn.com/cdn/raw/branding/rainbet-og-image.webp", "ogTitle": "Crypto Casino - Play Slots, Live Dealer & Originals with Bitcoin - Rainbet", "ogSiteName": "Rainbet", "themeColor": "#0d0f14", "description": "Play 8,000+ crypto casino games at Rainbet - slots, live dealer tables and 15 in-house Originals. Deposit Bitcoin, stablecoins or altcoins and play now!", "twitterCard": "summary", "canonicalUrl": "/casino", "ogDescription": "Play 8,000+ crypto casino games at Rainbet - slots, live dealer tables and 15 in-house Originals. Deposit Bitcoin, stablecoins or altcoins and play now!" }, "trackers": { "requests": 151 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 5, "tls": 37, "wait": 96, "connect": 7, "download": 98 }, "response_ms": 243 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 4979399, "co2_grams": 0.1821, "cleaner_than": 1 }, "dns_server": { "ns": [ { "ip": "172.64.35.42", "host": "maciej.ns.cloudflare.com" }, { "ip": "172.64.32.190", "host": "lorna.ns.cloudflare.com" } ], "zone": "playrainbet.cc" }, "cookies": { "cookies": [ { "name": "__cf_bm", "secure": true, "http_only": true, "same_site": "None" } ] }, "location": { "ip": "2a06:98c1:3121::9", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "playrainbet.cc" }, "dns": { "A": [ "188.114.96.9", "188.114.97.9" ], "NS": [ "maciej.ns.cloudflare.com", "lorna.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"lorna.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417642710, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3120::9", "2a06:98c1:3121::9" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000; includeSubDomains", "message": "HSTS header does not contain the preload directive." }, "http_security": { "xFrameOptions": "DENY", "referrerPolicy": "strict-origin-when-cross-origin, strict-origin-when-cross-origin", "xXSSProtection": false, "permissionsPolicy": "camera=(), microphone=(), geolocation=()", "xContentTypeOptions": "nosniff, nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31536000; includeSubDomains", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3121::9", "family": 6 }, "redirects": { "chain": [ "https://playrainbet.cc" ] }, "tech_stack": { "technologies": [ "Google Tag Manager", "HSTS", "Cloudflare", "PWA", "Open Graph", "HTTP/3" ] }, "linked_pages": { "external": [ "https://t.me/rainbetcom", "https://x.com/rainbetcom", "https://www.instagram.com/rainbetcom", "https://verification.anjouangamingboard.org/validate", "https://gamecheck.com/online-casino/rainbet" ], "external_count": 5, "internal_count": 411 }, "whois": { "registrar": "Eranet International Limited", "created": "2026-10-15T23:40:16Z", "updated": "2026-10-15T23:40:16Z", "expires": "2027-10-15T23:40:16Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "lorna.ns.cloudflare.com", "maciej.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-frame-options": "DENY", "x-content-type-options": "nosniff, nosniff", "referrer-policy": "strict-origin-when-cross-origin, strict-origin-when-cross-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()" } } } } ```