rainbet-aus[.]vip

Analysis of rainbet-aus.vip indicates that the domain was registered on June 04, 2026 through Hosting Concepts B.V. operating as Registrar.eu. The authoritative nameservers are joselyn.ns.cloudflare.com and kianchau.ns.cloudflare.com, confirming that the domain is served behind Cloudflare's DNS and likely benefits from their CDN and DDoS mitigation services. DNS resolution points to the IPv4 address 188.114.96.10, an IP address previously observed hosting other malicious sites, which raises the likelihood that the infrastructure is being leveraged for phishing campaigns.

The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed, demonstrating that at least one threat intelligence provider has identified it as malicious. VirusTotal reports that the domain was scanned by 91 vendors, none of which raised a detection at the time of scanning; however, the absence of detections does not constitute a validation of safety, and the domain remains classified as a generic phishing threat. No public information about the website’s SSL certificate, HTTP response codes, page title, or content has been disclosed, limiting the ability to confirm the exact phishing technique or targeted brand.

Consequently, defenders should treat the domain as a potential credential‑stealing vector until further evidence is obtained. Recommended mitigation steps include adding the domain to local blocklists, configuring network filters to deny traffic to 188.114.96.10, and monitoring DNS queries for the Cloudflare nameservers associated with the domain. Continuous re‑evaluation is advised, as the threat actor may modify the hosting or content at any time.