# PhishDestroy domain threat record: rainbet-pl.site

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/rainbet-pl.site/
Machine-readable companion: https://phishdestroy.io/domain/rainbet-pl.site/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-22 13:07:38 UTC
- Last availability or vendor check: 2026-10-22 13:07:38 UTC
- Stored record updated: 2026-10-22 16:30:29 UTC
- VirusTotal detections in the stored snapshot: 1/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.97.3
- Registrar in stored WHOIS data: Spaceship, Inc.
- Registrar country in stored WHOIS data: US
- Last stored HTTP status: 200
- Registration date (registry RDAP, rainbet-pl.site): 2026-10-09 09:04:02 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a163b7-d233-73aa-a9da-87b7af26cec7/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/rainbet-pl.site
- Certificate Transparency search: https://crt.sh/?q=%25.rainbet-pl.site
- Web Archive lookup: https://web.archive.org/web/*/https://rainbet-pl.site/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed rainbet-pl.site as malicious after an admin report and an AI assessment that identified brand impersonation of the Rainbet casino. The recorded page title is "Rainbet Polska 2026 | Bonus, Gry i Kasyno Online" and the site returned HTTP 200. The domain was first seen by PhishDestroy on 2026-10-22.

How the scam works
Impersonation sites copy the branding and visual design of legitimate gambling operators to lure visitors into creating accounts or depositing funds. Victims are typically enticed with bonus offers and may be asked for payment details or personal data under false pretenses.

Evidence
VirusTotal scanned the domain on 2026-10-18 and marked it as suspicious in one engine (Gridinsoft) out of 92. Google Safe Browsing reported no threat on 2026-10-22, while external blocklists MetaMask and SEAL listed the domain and OTX recorded four related pulses. Cloudflare Radar and urlscan both flagged the page as phishing, with urlscan's engines assigning a malicious score of 95 on 2026-10-22, and PhishDestroy’s internal list marks the domain as malicious.

Infrastructure
The domain was registered with Spaceship, Inc. on 2026-10-09, giving it an age of about 12 days at first observation. Hosting is provided through Cloudflare, recorded at IP 188.114.97.3 in the CloudFLARENET‑EU network and associated with Great Britain. The site uses a Let’s Encrypt TLS certificate valid until 2027-01-07.

What to do
Visitors should avoid entering credentials, payment information, or personal data on the site; if any were submitted, change passwords on affected accounts and monitor financial statements. Defenders can block rainbet-pl.site at DNS or proxy level, add the observed IP and Cloudflare network to threat feeds, and review logs for connections to this exact address. Continue to monitor the domain for changes, as the evidence reflects the state captured on 2026-10-22.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a163b7-d233-73aa-a9da-87b7af26cec7/
Cloudflare Radar report: https://radar.cloudflare.com/scan/06513261-212e-4df8-88cb-a424e83d5273
URLQuery report: https://urlquery.net/report/1eca6543-fea2-4af0-9445-a7a23bff271b
Stored capture screenshot: https://i.ibb.co/Q3KG3LZT/c7c8da2b9dad.png
Cloudflare Radar screenshot (2026-10-22T13:41:53Z): https://screenshots.phishdestroy.io/cf/06513261-212e-4df8-88cb-a424e83d5273.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/1eca6543-fea2-4af0-9445-a7a23bff271b.png
URLScan screenshot (2026-10-22T13:17:37Z): https://screenshots.phishdestroy.io/us/01a163c2-6ed5-7279-b622-afb6bc88dcd8.png
URLScan capture report: https://urlscan.io/result/01a163c2-6ed5-7279-b622-afb6bc88dcd8/
VirusTotal report: https://www.virustotal.com/gui/domain/rainbet-pl.site
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=rainbet-pl.site
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-22 14:49:41 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/Q3KG3LZT/c7c8da2b9dad.png
  Captured: 2026-10-22 13:07:38 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a163b7-d233-73aa-a9da-87b7af26cec7.png
  Captured: 2026-10-22 13:07:38 UTC
  Source report: https://urlscan.io/result/01a163b7-d233-73aa-a9da-87b7af26cec7/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/06513261-212e-4df8-88cb-a424e83d5273.png
  Captured: 2026-10-22 13:41:53 UTC
  Source report: https://radar.cloudflare.com/scan/06513261-212e-4df8-88cb-a424e83d5273
  SHA-256: 844a69d8432949473468a86dd3af5598715ed9c71546d34630f7715bda849fdd
- URLQuery: https://screenshots.phishdestroy.io/uq/1eca6543-fea2-4af0-9445-a7a23bff271b.png
  Source report: https://urlquery.net/report/1eca6543-fea2-4af0-9445-a7a23bff271b
  SHA-256: 03692703bdbea49701aea4b1128643cce5f147d89b3631b803fd907cab18b4a1
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a163c2-6ed5-7279-b622-afb6bc88dcd8.png
  Captured: 2026-10-22 13:17:37 UTC
  Source report: https://urlscan.io/result/01a163c2-6ed5-7279-b622-afb6bc88dcd8/
  SHA-256: 9afeee76ba8435da3d1f19a375ebb698bfed6100573396350d4f0e0d777ee280

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-22T13:43:51Z",
        "uuid": "01a163b7-d233-73aa-a9da-87b7af26cec7",
        "scanned_at": "2026-10-22T13:06:01Z",
        "final_url": "https://rainbet-pl.site/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://rainbet-pl.site/",
                "from": "http://rainbet-pl.site/",
                "status": 307
            }
        ],
        "ip": "188.114.97.3",
        "domains": [
            "www.googletagmanager.com",
            "region1.google-analytics.com"
        ],
        "ips": [
            "2001:4860:4802:34::36",
            "2a00:1450:4001:c17::61",
            "188.114.97.3"
        ],
        "asns": [
            "15169",
            "13335"
        ],
        "countries": [
            "US",
            "DE"
        ],
        "link_domains": [
            "www.instagram.com",
            "x.com",
            "t.me"
        ],
        "social": [
            "https://www.instagram.com/rainbetcom",
            "https://x.com/rainbetcom",
            "https://t.me/rainbetcom"
        ],
        "doc_hash": "1214c911a917b42f6f4fce0f4315640c2786514cdbdfee29e4cb95b15990ef07",
        "script_hashes": [
            "af3d84394276d024af30771515d6f8f7d59b26616ca74eeba66e36c3062b5f88"
        ],
        "globals": [
            "app_localize",
            "$",
            "jQuery",
            "lwptoc",
            "dataLayer",
            "google_tag_data",
            "google_tag_manager",
            "onYouTubeIframeAPIReady",
            "gaGlobal"
        ],
        "cookies": [
            "_ga_W3Q8EL1MRD",
            "_ga"
        ],
        "tls": {
            "san": [
                "*.rainbet-pl.site",
                "rainbet-pl.site"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "rainbet-pl.site",
            "protocol": "QUIC",
            "valid_to": "2027-01-07T08:39:45Z",
            "valid_from": "2026-10-09T08:39:46Z"
        },
        "domain_age_days": 12,
        "apex_age_days": 12,
        "tls_age_days": 13,
        "tls_valid_days": 89,
        "requests": 46,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 95,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=UTF-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-22T13:43:53Z",
        "uuid": "06513261-212e-4df8-88cb-a424e83d5273",
        "scanned_at": "2026-10-22T13:41:53Z",
        "final_url": "https://rainbet-pl.site/",
        "status": 200,
        "history": [
            {
                "url": "https://rainbet-pl.site/",
                "status": 200
            }
        ],
        "dom_hash": "c4b1c59cb0ade1e0eb9f50c8db819552c803e8b74e7d57dcaa08055a35f46aa3",
        "doc_hash": "70c6ac11f18970e910cf7f2341475710cd102c95bce7c5a8391c0477d80a1645",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "New Domains",
            "Security Risks",
            "Newly Seen Domains",
            "Gambling",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "rainbet-pl.site",
                "type": "A",
                "value": "172.67.200.139"
            },
            {
                "name": "rainbet-pl.site",
                "type": "A",
                "value": "104.21.52.148"
            },
            {
                "name": "rainbet-pl.site",
                "type": "AAAA",
                "value": "2606:4700:3032::6815:3494"
            },
            {
                "name": "rainbet-pl.site",
                "type": "AAAA",
                "value": "2606:4700:3032::ac43:c88b"
            }
        ],
        "dnssec_valid": false,
        "ip": "172.67.200.139",
        "whois": {
            "registrar": "Spaceship, Inc.",
            "created": "2026-10-09T09:04:02Z",
            "updated": "2026-10-14T09:05:00Z",
            "expires": "2027-10-09T09:04:02Z",
            "nameservers": [
                "athena.ns.cloudflare.com",
                "zeus.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T14:46:08Z",
        "analysis_at": "2026-10-18T15:53:52Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 1,
            "undetected": 36
        },
        "detections": {
            "Gridinsoft": "suspicious"
        },
        "reputation": 0,
        "registrar": "Spaceship, Inc.",
        "created": "2026-10-09T09:04:02Z",
        "expires": "2027-10-09T09:04:02Z",
        "updated": "2026-10-14T09:05:00Z",
        "first_seen": "2026-10-12T10:05:27Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.52.148"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3032::6815:3494"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "athena.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "athena.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3032::ac43:c88b"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "zeus.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.200.139"
            }
        ],
        "dns_at": "2026-10-18T16:31:08Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "*.rainbet-pl.site",
                "rainbet-pl.site"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "6ffedf5f3d2963a35f7b839b3940931fa0b",
            "sha256": "ce18ac16c4d4dd66e584c11283e51a3a5786a948b36c60d25add7c384e4e0997",
            "subject": "rainbet-pl.site",
            "valid_to": "2027-01-07T08:39:45Z",
            "valid_from": "2026-10-09T08:39:46Z"
        },
        "whois": {
            "registrar": "Spaceship, Inc.",
            "registrar_iana_id": "3862",
            "registrar_url": "https://www.spaceship.com/",
            "created": "2026-10-09T09:04:02Z",
            "updated": "2026-10-14T09:05:00Z",
            "expires": "2027-10-09T09:04:02Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "athena.ns.cloudflare.com",
                "zeus.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited",
                "add period"
            ],
            "events": {
                "last changed": "2026-10-09T09:30:42Z",
                "registration": "2026-10-09T09:04:02Z",
                "registrar expiration": "2027-10-09T09:04:02Z",
                "last update of RDAP database": "2026-10-12T10:05:27Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-22T13:44:14Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "rainbet-pl.site"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-22T13:12:38Z",
            "first": "2026-10-10T21:15:48Z",
            "changes": 1,
            "days_archived": 3,
            "scans_per_day": 0.17,
            "avg_page_bytes": 23388
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://rainbet-pl.site/sitemap_index.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "ogUrl": "https://rainbet-pl.site/",
            "title": "Rainbet Polska 2026 | Bonus, Gry i Kasyno Online",
            "ogType": "website",
            "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1",
            "ogImage": "https://rainbet-pl.site/wp-content/uploads/2026/09/1-rainbet-casino-polska.webp",
            "ogTitle": "Rainbet Polska 2026 | Bonus, Gry i Kasyno Online",
            "ogSiteName": "Rainbet PL",
            "themeColor": "#0f1328",
            "description": "Rainbet w Polsce: sprawdź bonusy, gry kasynowe, płatności i wersję mobilną. Zobacz, jak założyć konto i rozpocząć grę.",
            "twitterCard": "summary_large_image",
            "canonicalUrl": "https://abaplearning.com/",
            "ogDescription": "Rainbet w Polsce: sprawdź bonusy, gry kasynowe, płatności i wersję mobilną. Zobacz, jak założyć konto i rozpocząć grę."
        },
        "trackers": {
            "requests": 36
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 504,
                "tls": 60,
                "wait": 110,
                "connect": 8,
                "download": 28
            },
            "response_ms": 710
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 138235,
            "co2_grams": 0.0051,
            "cleaner_than": 15
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.192.72",
                    "host": "athena.ns.cloudflare.com"
                },
                {
                    "ip": "173.245.59.249",
                    "host": "zeus.ns.cloudflare.com"
                }
            ],
            "zone": "rainbet-pl.site"
        },
        "location": {
            "ip": "2a06:98c1:3121::9",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "rainbet-pl.site"
        },
        "dns": {
            "A": [
                "188.114.96.9",
                "188.114.97.9"
            ],
            "NS": [
                "athena.ns.cloudflare.com",
                "zeus.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"athena.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417082155, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3120::9",
                "2a06:98c1:3121::9"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3121::9",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://rainbet-pl.site"
            ]
        },
        "tech_stack": {
            "technologies": [
                "WordPress",
                "MySQL",
                "PHP",
                "Autoptimize",
                "Google Tag Manager",
                "Google Analytics",
                "jQuery",
                "Cloudflare",
                "Open Graph",
                "HTTP/3"
            ]
        },
        "social_presence": {
            "profiles": [
                "https://x.com/rainbetcom"
            ]
        },
        "linked_pages": {
            "external": [
                "https://www.instagram.com/rainbetcom",
                "https://x.com/rainbetcom",
                "https://t.me/rainbetcom"
            ],
            "external_count": 3,
            "internal_count": 20
        },
        "whois": {
            "registrar": "Spaceship, Inc.",
            "created": "2026-10-09T09:04:02Z",
            "updated": "2026-10-14T09:05:00Z",
            "expires": "2027-10-09T09:04:02Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "athena.ns.cloudflare.com",
                "zeus.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=UTF-8"
            }
        }
    }
}
```