# PhishDestroy domain threat record: rainbet-nz.site Content language: English Canonical HTML report: https://phishdestroy.io/domain/rainbet-nz.site/ Machine-readable companion: https://phishdestroy.io/domain/rainbet-nz.site/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 13:17:09 UTC - Last availability or vendor check: 2026-10-22 13:17:09 UTC - Stored record updated: 2026-10-22 16:30:26 UTC - VirusTotal detections in the stored snapshot: 2/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: chase ## Stored infrastructure - Observed IP address: 216.69.175.71 - Registrar in stored WHOIS data: Hosting Concepts B.V. d/b/a Registrar.eu - Registrar country in stored WHOIS data: UA - Last stored HTTP status: 200 - Registration date (registry RDAP, rainbet-nz.site): 2026-09-22 10:56:34 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a163c0-9c36-72ab-8d9f-b0c92909707f/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/rainbet-nz.site - Certificate Transparency search: https://crt.sh/?q=%25.rainbet-nz.site - Web Archive lookup: https://web.archive.org/web/*/https://rainbet-nz.site/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s automated intake flagged rainbet-nz.site because VirusTotal reported a malicious detection for the domain. The recorded page title reads “Rainbet Casino in New Zealand” and the page advertises a 250 % welcome bonus and 60 free spins, which the intake AI identified as typical of fraudulent gambling offers. The domain was first seen by PhishDestroy on 2026-10-22, thirty days after its registration on 2026-09-22. An HTTP request on 2026-10-22 returned a 200 response code. How the scam works Fake online casino sites lure visitors with exaggerated bonuses and free‑spin promotions, then pressure them to deposit money or provide payment details before any winnings are paid, after which the operators disappear with the funds. Evidence VirusTotal scanned the domain on 2026-10-21 and flagged 1 of 92 engines as malicious (Kaspersky) and 1 as suspicious (Gridinsoft). Google Safe Browsing checked on 2026-10-22 and did not flag the site. External blocklists MetaMask and SEAL listed the domain as malicious on 2026-10-22, and PhishDestroy’s internal blocklist also contains it. OTX recorded three pulses referencing the domain on 2026-10-22. urlscan.io captured the site on 2026-10-22; its engine analysis gave a malicious score of 99, while the overall verdict was non‑malicious. Infrastructure The domain was registered on 2026-09-22 through Hosting Concepts B.V. d/b/a Registrar.eu with nameservers ns1.openprovider.nl, ns2.openprovider.be and ns3.openprovider.eu. DNS resolution on 2026-10-22 returned IP 216.69.175.71, which belongs to GoDaddy.com, LLC in the United States. The site presented an Apache server banner and used a Let’s Encrypt TLS certificate valid from 2026-09-28 to 2026-12-27 for rainbet-nz.site and www.rainbet-nz.site. What to do Visitors should avoid entering any personal, financial or cryptocurrency information and should not make deposits on the site. If any credentials were entered, change the associated passwords immediately. Organizations should add rainbet-nz.site to web‑filter block lists and monitor outbound connections to the recorded IP for unexpected traffic. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a163c0-9c36-72ab-8d9f-b0c92909707f/ Cloudflare Radar report: https://radar.cloudflare.com/scan/eb27f75a-b159-47cf-9b88-3fe0df6c3e35 URLQuery report: https://urlquery.net/report/6266c8ec-1ab0-4704-b185-7d5d555e5a32 Stored capture screenshot: https://i.ibb.co/4ZVgGtX6/c22b7645c89c.png Cloudflare Radar screenshot (2026-10-22T13:48:45Z): https://screenshots.phishdestroy.io/cf/eb27f75a-b159-47cf-9b88-3fe0df6c3e35.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/6266c8ec-1ab0-4704-b185-7d5d555e5a32.png URLScan screenshot (2026-10-22T13:06:34Z): https://screenshots.phishdestroy.io/us/01a163b8-1a3b-759b-9e1e-760f823d895c.png URLScan capture report: https://urlscan.io/result/01a163b8-1a3b-759b-9e1e-760f823d895c/ URLScan screenshot (2026-10-22T13:16:50Z): https://screenshots.phishdestroy.io/us/01a163c1-b1bb-74db-a5da-bdfc097c056e.png URLScan capture report: https://urlscan.io/result/01a163c1-b1bb-74db-a5da-bdfc097c056e/ VirusTotal report: https://www.virustotal.com/gui/domain/rainbet-nz.site Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=rainbet-nz.site Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 13:50:44 UTC ## Stored page captures - Primary capture: https://i.ibb.co/4ZVgGtX6/c22b7645c89c.png Captured: 2026-10-22 13:17:09 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a163c0-9c36-72ab-8d9f-b0c92909707f.png Captured: 2026-10-22 13:17:09 UTC Source report: https://urlscan.io/result/01a163c0-9c36-72ab-8d9f-b0c92909707f/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/eb27f75a-b159-47cf-9b88-3fe0df6c3e35.png Captured: 2026-10-22 13:48:45 UTC Source report: https://radar.cloudflare.com/scan/eb27f75a-b159-47cf-9b88-3fe0df6c3e35 SHA-256: e8514401c4277dbf183f42880d7ff17666a22a73ccc31d846f14cacf3969b4be - URLQuery: https://screenshots.phishdestroy.io/uq/6266c8ec-1ab0-4704-b185-7d5d555e5a32.png Source report: https://urlquery.net/report/6266c8ec-1ab0-4704-b185-7d5d555e5a32 SHA-256: 9d9babadff8ab5340e634329f75365ad1e4b5059545008c974e11d775cd61f1c - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a163b8-1a3b-759b-9e1e-760f823d895c.png Captured: 2026-10-22 13:06:34 UTC Source report: https://urlscan.io/result/01a163b8-1a3b-759b-9e1e-760f823d895c/ SHA-256: 9909a59fbd47f614db3dd964b8b272d15390e25175559411cd044198200caadb - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a163c1-b1bb-74db-a5da-bdfc097c056e.png Captured: 2026-10-22 13:16:50 UTC Source report: https://urlscan.io/result/01a163c1-b1bb-74db-a5da-bdfc097c056e/ SHA-256: afae62c5db38daa3888e841e68efe5a9c2820c16d5e8511492b9988fe9ac0702 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T13:49:42Z", "uuid": "01a163c0-9c36-72ab-8d9f-b0c92909707f", "scanned_at": "2026-10-22T13:15:39Z", "final_url": "https://rainbet-nz.site/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://rainbet-nz.site/", "from": "http://rainbet-nz.site/", "status": 307 } ], "ip": "216.69.175.71", "ptr": "71.175.69.216.host.secureserver.net", "domains": [ "csp.secureserver.net", "img1.wsimg.com", "cdn.jsdelivr.net", "fonts.googleapis.com", "fonts.gstatic.com" ], "ips": [ "184.27.43.36", "142.250.195.227", "104.72.70.172", "104.17.207.5", "142.251.222.234", "216.69.175.71" ], "asns": [ "16625", "15169", "20940", "13335", "26496" ], "countries": [ "AU", "US" ], "link_domains": [ "zynto.top" ], "doc_hash": "950e9c7736908f59e3cf54c3c6dc00703035c507ebe8dd8cd8104dea51e7337f", "script_hashes": [ "9fcaf6ae2039230f4838d5e411b1ae19f3ee61740fee64abe81440d958575639" ], "globals": [ "Swiper", "_trfd", "_tcclInternal", "_expDataLayer", "_signalsDataLayer", "scc-c2", "_trfq" ], "cookies": [ "_tccl_visitor", "_tccl_visit", "_scc_session" ], "tls": { "san": [ "rainbet-nz.site", "www.rainbet-nz.site" ], "cipher": "AES_256_GCM", "issuer": "YR1", "subject": "rainbet-nz.site", "protocol": "TLS 1.2", "valid_to": "2026-12-27T14:42:31Z", "valid_from": "2026-09-28T14:42:32Z" }, "domain_age_days": 29, "apex_age_days": 29, "tls_age_days": 23, "tls_valid_days": 89, "requests": 26, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "Apache", "content-type": "text/html" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T13:49:43Z", "uuid": "eb27f75a-b159-47cf-9b88-3fe0df6c3e35", "scanned_at": "2026-10-22T13:48:45Z", "final_url": "https://rainbet-nz.site/", "status": 200, "history": [ { "url": "https://rainbet-nz.site/", "status": 200 } ], "dom_hash": "b4df7e5e5b037d2f4a3d6ffea553dabadb97ca02166af40d6d3d9bd1e6b250b3", "doc_hash": "950e9c7736908f59e3cf54c3c6dc00703035c507ebe8dd8cd8104dea51e7337f", "domain_risks": [ "Newly Seen Domains", "Security Risks", "New Domains" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "rainbet-nz.site", "type": "A", "value": "216.69.175.71" } ], "dnssec_valid": false, "ip": "216.69.175.71", "whois": { "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "created": "2026-09-22T10:56:34Z", "updated": "2026-09-27T10:57:04Z", "expires": "2027-09-22T10:56:34Z", "nameservers": [ "ns1.openprovider.nl", "ns2.openprovider.be", "ns3.openprovider.eu" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T13:48:28Z", "analysis_at": "2026-10-21T15:32:02Z", "stats": { "timeout": 0, "harmless": 54, "malicious": 1, "suspicious": 1, "undetected": 36 }, "detections": { "Kaspersky": "phishing", "Gridinsoft": "suspicious" }, "reputation": 0, "tags": [ "dga" ], "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "created": "2026-09-22T10:56:34Z", "expires": "2027-09-22T10:56:34Z", "updated": "2026-09-27T10:57:04Z", "first_seen": "2026-09-22T17:54:15Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "ns1.openprovider.nl" }, { "ttl": 21600, "type": "NS", "value": "ns3.openprovider.eu" }, { "ttl": 3600, "type": "A", "value": "216.69.175.71" }, { "ttl": 21600, "type": "NS", "value": "ns2.openprovider.be" }, { "ttl": 3600, "type": "TXT", "value": "google-site-verification=gdu_KsEdqrZlW1IQybSCQR_Mx_R1vuM7R9qTFj2HZls" }, { "ttl": 21600, "type": "SOA", "rname": "dns\\@openprovider.eu", "value": "ns1.openprovider.nl" } ], "dns_at": "2026-10-21T15:39:51Z", "jarm": "2ad2ad16d2ad2ad0002ad2ad2ad2adbfb4c26e4a72aca380107db225a1ef64", "cert": { "san": [ "rainbet-nz.site", "www.rainbet-nz.site" ], "issuer": "Let's Encrypt / YR1", "serial": "61523f80be136c831ef8e28a47c920b02e", "sha256": "eeda4ca5bba3be44b65b60ce8dde424e7dc3772defce10ead691f85d45bed1b7", "subject": "rainbet-nz.site", "valid_to": "2026-12-27T14:42:31Z", "valid_from": "2026-09-28T14:42:32Z" }, "whois": { "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "registrar_iana_id": "1647", "registrar_url": "https://www.openprovider.com/", "created": "2026-09-22T10:56:34Z", "updated": "2026-09-22T12:56:46Z", "expires": "2027-09-22T10:56:34Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.openprovider.nl", "ns2.openprovider.be", "ns3.openprovider.eu" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "expiration": "2027-09-22T10:56:34Z", "registration": "2026-09-22T10:56:34Z", "registrar expiration": "2027-09-22T10:56:34Z", "last update of RDAP database": "2026-10-21T15:39:51Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T13:50:06Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "rainbet-nz.site" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-22T13:20:30Z", "first": "2026-10-22T13:20:30Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 8589 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://rainbet-nz.site/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 15 }, "social_tags": { "title": "Rainbet Casino in New Zealand", "robots": "index, follow", "description": "Rainbet casino and sportsbook for eligible players in New Zealand. Welcome path up to 250% and $2,100 plus 60 free spins with code hella.", "canonicalUrl": "https://rainbet-nz.site/" }, "trackers": { "requests": 24, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 2 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js", "https://img1.wsimg.com/traffic-assets/js/tccl.min.js" ], "third_party_scripts": 2 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 510, "wait": 198, "connect": 495, "download": 161 }, "response_ms": 1366 }, "tls_connection": { "alpn": "h2", "cipher": "ECDHE-RSA-AES256-GCM-SHA384", "protocol": "TLSv1.2", "versions": [ "TLSv1.2" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 22, 25, 80, 110, 143, 443, 587, 993, 995, 3306 ] }, "carbon": { "bytes": 34928, "co2_grams": 0.0013, "cleaner_than": 45 }, "dns_server": { "ns": [ { "ip": "162.159.48.89", "host": "ns3.openprovider.eu" }, { "ip": "162.159.27.96", "host": "ns2.openprovider.be" }, { "ip": "162.159.26.10", "host": "ns1.openprovider.nl" } ], "zone": "rainbet-nz.site" }, "cookies": { "cookies": [ { "name": "_tccl_visitor", "secure": true, "same_site": "None" }, { "name": "_tccl_visit", "secure": true, "same_site": "None" }, { "name": "_scc_session", "secure": true, "same_site": "None" } ] }, "location": { "ip": "216.69.175.71", "asn": "398101", "org": "GoDaddy.com, LLC", "city": "Tempe", "country": "US" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "rainbet-nz.site" }, "dns": { "A": [ "216.69.175.71" ], "NS": [ "ns3.openprovider.eu", "ns1.openprovider.nl", "ns2.openprovider.be" ], "SOA": "{\"nsname\": \"ns1.openprovider.nl\", \"hostmaster\": \"dns\\\\@openprovider.eu\", \"serial\": 2026093001, \"refresh\": 10800, \"retry\": 3600, \"expire\": 604800, \"minttl\": 3600}", "TXT": [ "google-site-verification=gdu_KsEdqrZlW1IQybSCQR_Mx_R1vuM7R9qTFj2HZls" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "216.69.175.71", "family": 4 }, "redirects": { "chain": [ "https://rainbet-nz.site" ] }, "tech_stack": { "technologies": [ "Apache HTTP Server", "Swiper", "Priority Hints", "jsDelivr", "Google Font API" ] }, "linked_pages": { "external": [ "https://zynto.top/go-rainbet-nz" ], "external_count": 1, "internal_count": 16 }, "whois": { "registrar": "Hosting Concepts B.V. d/b/a Registrar.eu", "created": "2026-09-22T10:56:34Z", "updated": "2026-09-27T10:57:04Z", "expires": "2027-09-22T10:56:34Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.openprovider.nl", "ns2.openprovider.be", "ns3.openprovider.eu" ] }, "headers": { "headers": { "server": "Apache", "content-type": "text/html" } } } } ```