# rainbetes.com — Recorded security evidence | PhishDestroy
Content language: English
Canonical HTML report: https://phishdestroy.io/domain/rainbetes.com/
Machine-readable companion: https://phishdestroy.io/domain/rainbetes.com/llm.txt
## Summary
PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.
## Stored observations
- Listed by PhishDestroy: yes
- Availability at last stored check: Last known active
- First observed by PhishDestroy: 2026-10-23 19:46:19 UTC
- Selected availability observation: 2026-11-07T23:28:01Z
- Stored record updated: 2026-11-08 04:45:04 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: checked_clean
## Stored labels and detections
- Automated brand label (collector metadata; not a confirmed impersonation finding): cs2
## Stored infrastructure
- Observed IP address: 188.114.97.3
- Registrar in stored WHOIS data: URL Solutions, Inc.
- Last stored HTTP status: 200 (observed: 2026-11-07T23:28:01Z)
- Registration date (registry RDAP, rainbetes.com): 2026-08-27 14:20:16 UTC
## Evidence links
- URLScan report: https://urlscan.io/result/01a16a4c-0475-772b-9f26-efe029dc6507/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/rainbetes.com
- Certificate Transparency search: https://crt.sh/?q=%25.rainbetes.com
- Web Archive lookup: https://web.archive.org/web/*/https://rainbetes.com/
## Corrections
- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq
## Public report package
PhishDestroy stores a record for rainbetes.com. Source observations are dated separately; missing checks do not establish safety.
PhishDestroy stores a record for rainbetes.com. Source observations are dated separately; missing checks do not establish safety.
A reviewed analysis is not available for this text revision. Consult the dated source records below.
Package revision: 3d755339402f27732959a44ff33210817af2a92c5112f41d627011df5eaea179
Source facts (timestamps as stored): {"record_id":1643925,"first_recorded_at":"2026-10-23 21:46:19","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":0,"denominator":92,"malicious":0,"suspicious":0,"vendors":null,"observed_at":"2026-10-23T20:43:58Z","checked_at":null,"fetched_at":"2026-10-24T01:54:12Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":12,"denominator":92,"malicious":null,"suspicious":null,"vendors":["ChainPatrol","alphaMountain.ai","BitDefender","CRDF","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","SOCRadar","Sophos","URLQuery"],"observed_at":null,"checked_at":"2026-10-27 04:03:08","fetched_at":"2026-10-27 03:03:09","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":[],"vendor_names":[],"stats":{"timeout":0,"harmless":55,"malicious":0,"suspicious":0,"undetected":37}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-04 12:01:18"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-10-24 00:30:25"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1643925,"scope":"checked_url","observed_at":"2026-11-07T23:28:01Z","http_status":200,"http_observed_at":"2026-11-07T23:28:01Z","stored_http_code":200,"stored_http_observed_at":"2026-11-07T23:28:01Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"served_at_root","content_classification_at":"2026-11-07T23:08:38Z","registration_state":"unknown","policy":"20261102-dated-availability-v2"}}
## Stored page captures
- Stored capture: https://i.ibb.co/n8DCzFHG/14fc49a52dd6.png
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/01a16a4c-0475-772b-9f26-efe029dc6507.png
Captured: 2026-10-23 19:45:40 UTC
Source report: https://urlscan.io/result/01a16a4c-0475-772b-9f26-efe029dc6507/
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16a51-bbab-73f7-b01f-331ab11fd21e.png
Captured: 2026-10-23 19:51:51 UTC
Source report: https://urlscan.io/result/01a16a51-bbab-73f7-b01f-331ab11fd21e/
SHA-256: 6589445ed359583403407783d993de0263a43012c6fe315b2f0f434b219ea7be
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/e28a933c-5110-40e3-b62c-9d6aab3968de.png
Captured: 2026-10-23 19:46:49 UTC
Source report: https://radar.cloudflare.com/scan/e28a933c-5110-40e3-b62c-9d6aab3968de
SHA-256: 69a2aabeee01c88e4932989905b3f0be15a9515be079f4f34523dc3bdd8d0e69
- URLQuery: https://screenshots.phishdestroy.io/uq/184caa57-1adb-471e-af99-b64a09b59ecd.png
Source report: https://urlquery.net/report/184caa57-1adb-471e-af99-b64a09b59ecd
SHA-256: a19f2680a72742d117dbd891a5b091e5ecc727754a73dd6b57ac69fdc9acafcb
## Collected source observations
Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
"urlscan": {
"v": 1,
"fetched_at": "2026-10-23T19:47:05Z",
"uuid": "01a16a4c-0475-772b-9f26-efe029dc6507",
"scanned_at": "2026-10-23T19:45:40Z",
"final_url": "https://rainbetes.com/",
"status": 200,
"redirected": "https-only",
"redirects": [
{
"to": "https://rainbetes.com/",
"from": "http://rainbetes.com/",
"status": 307
}
],
"ip": "188.114.96.3",
"ips": [
"188.114.96.3"
],
"asns": [
"13335"
],
"link_domains": [
"x.com",
"cookiedatabase.org"
],
"social": [
"https://x.com/JohnRainbet"
],
"doc_hash": "30d9a3734713be570f2786f61863f7fdd5d0fea3aee1f3334c3c904f69916a8b",
"script_hashes": [
"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8"
],
"globals": [
"litespeed_docref",
"litespeed_vary",
"urlCreator",
"litespeed_load_delayed_js_force",
"litespeed_load_delayed_js",
"litespeed_load_one",
"litespeed_inline2src",
"litespeed_ui_events"
],
"tls": {
"san": [
"rainbetes.com",
"*.rainbetes.com"
],
"cipher": "AES_128_GCM",
"issuer": "WE1",
"subject": "rainbetes.com",
"protocol": "QUIC",
"valid_to": "2026-11-26T09:07:23Z",
"valid_from": "2026-08-28T08:10:03Z"
},
"domain_age_days": 56,
"apex_age_days": 56,
"tls_age_days": 56,
"tls_valid_days": 90,
"requests": 25,
"verdicts": {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 96,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
},
"headers": {
"server": "cloudflare",
"content-type": "text/html; charset=UTF-8",
"strict-transport-security": "max-age=31536000;",
"priority": "u=0,i",
"link": "; rel=\"https://api.w.org/\"\n; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\"\n; rel=shortlink"
}
},
"cf": {
"v": 1,
"fetched_at": "2026-10-23T19:47:07Z",
"uuid": "e28a933c-5110-40e3-b62c-9d6aab3968de",
"scanned_at": "2026-10-23T19:46:49Z",
"final_url": "https://rainbetes.com/",
"status": 200,
"history": [
{
"url": "https://rainbetes.com/",
"status": 200
},
{
"url": "https://rainbetes.com/",
"status": 200
}
],
"dom_hash": "136e42cc57e0ab301035b846dca13c02d17155ce2921155fbb0da2fe7e492a7e",
"doc_hash": "91cd753ca569b70c48e60572e93b41192bf2682ced316c1f86c6b74c52a342c3",
"radar_rank": {
"bucket": ">200000"
},
"dns": [
{
"name": "rainbetes.com",
"type": "A",
"value": "172.67.223.199"
},
{
"name": "rainbetes.com",
"type": "A",
"value": "104.21.62.126"
},
{
"name": "rainbetes.com",
"type": "AAAA",
"value": "2606:4700:3037::6815:3e7e"
},
{
"name": "rainbetes.com",
"type": "AAAA",
"value": "2606:4700:3034::ac43:dfc7"
}
],
"dnssec_valid": false,
"ip": "172.67.223.199",
"whois": {
"registrar": "URL Solutions, Inc.",
"created": "2026-08-27T14:20:16Z",
"updated": "2026-08-28T09:07:05Z",
"expires": "2027-08-27T14:20:16Z",
"nameservers": [
"bjorn.ns.cloudflare.com",
"gene.ns.cloudflare.com"
]
}
},
"vt": {
"v": 1,
"fetched_at": "2026-10-24T01:54:12Z",
"analysis_at": "2026-10-23T20:43:58Z",
"stats": {
"timeout": 0,
"harmless": 55,
"malicious": 0,
"suspicious": 0,
"undetected": 37
},
"reputation": 0,
"categories": {
"alphaMountain.ai": "Gambling, Malicious (alphaMountain.ai)"
},
"registrar": "URL Solutions, Inc.",
"created": "2026-08-27T14:20:16Z",
"expires": "2027-08-27T14:20:16Z",
"updated": "2026-08-28T09:07:05Z",
"first_seen": "2026-08-29T23:56:05Z",
"dns": [
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:3037::6815:3e7e"
},
{
"ttl": 300,
"type": "A",
"value": "104.21.62.126"
},
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:3034::ac43:dfc7"
},
{
"ttl": 300,
"type": "A",
"value": "172.67.223.199"
},
{
"ttl": 3600,
"type": "MX",
"value": "mail.rainbetes.com",
"priority": 0
},
{
"ttl": 21600,
"type": "NS",
"value": "gene.ns.cloudflare.com"
},
{
"ttl": 21600,
"type": "NS",
"value": "bjorn.ns.cloudflare.com"
},
{
"ttl": 3600,
"type": "TXT",
"value": "v=spf1 a mx ip4:37.1.222.175 ~all"
},
{
"ttl": 1800,
"type": "SOA",
"rname": "dns.cloudflare.com",
"value": "bjorn.ns.cloudflare.com"
}
],
"dns_at": "2026-10-23T20:49:38Z",
"jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
"cert": {
"san": [
"rainbetes.com",
"*.rainbetes.com"
],
"issuer": "Google Trust Services / WE1",
"serial": "f4e1d5e58d1117c4133b78918c177462",
"sha256": "0eac322bcd3a3292238f2e24d18c4cf390fd8d61549412cef89bee55669f4c90",
"subject": "rainbetes.com",
"valid_to": "2026-11-26T09:07:23Z",
"valid_from": "2026-08-28T08:10:03Z"
},
"whois": {
"registrar": "URL Solutions, Inc.",
"registrar_iana_id": "1449",
"registrar_url": "http://www.pananames.com",
"created": "2026-08-27T14:20:16Z",
"updated": "2026-08-28T09:07:05Z",
"expires": "2027-08-27T14:20:16Z",
"status": [
"clientTransferProhibited"
],
"nameservers": [
"bjorn.ns.cloudflare.com",
"gene.ns.cloudflare.com"
],
"dnssec": "unsigned"
},
"rdap": {
"status": [
"client transfer prohibited"
],
"events": {
"last changed": "2026-08-27T14:20:17Z",
"registration": "2026-08-27T14:20:16Z",
"registrar expiration": "2027-08-27T14:20:16Z",
"last update of RDAP database": "2026-10-23T20:49:38Z"
}
}
},
"webcheck": {
"v": 1,
"fetched_at": "2026-10-23T19:47:20Z",
"mail_config": {
"mx": [
"mail.rainbetes.com"
],
"spf": "v=spf1 a mx ip4:37.1.222.175 ~all",
"dkim": [
"mail"
],
"dmarc": true,
"dkim_bits": 1024,
"spf_lookups": 2
},
"caa_records": {
"domain": "rainbetes.com"
},
"block_lists": {
"resolvers": 12,
"blocked_count": 0
},
"robots_txt": {
"agents": [
"*",
"ia_archiver",
"ChatGPT-User"
],
"present": true,
"sitemaps": [
"https://rainbetes.com/page-sitemap.xml"
]
},
"sitemap": {
"present": true,
"url_count": 18
},
"social_tags": {
"ogUrl": "https://rainbetes.com/",
"title": "Rainbet España – Casino Cripto con Bonos Exclusivos",
"ogType": "website",
"robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1",
"ogImage": "https://rainbetes.com/wp-content/uploads/2025/10/Rainbet-Casino-Juegos.webp",
"ogTitle": "Rainbet España – Casino Cripto con Bonos Exclusivos",
"ogSiteName": "Rainbet",
"description": "Rainbet , online casino con licencia, pagos rápidos, bonos flexibles y juegos originales. Apuestas, slots y criptomonedas seguras con excelentes beneficios.",
"twitterCard": "summary_large_image",
"canonicalUrl": "https://rainbetes.com/",
"ogDescription": "Rainbet , online casino con licencia, pagos rápidos, bonos flexibles y juegos originales. Apuestas, slots y criptomonedas seguras con excelentes beneficios."
},
"trackers": {
"requests": 34,
"trackers": [
{
"name": "Google Fonts",
"company": "Google",
"country": "US",
"category": "Hosting",
"requests": 1
},
{
"name": "Google Static",
"company": "Google",
"country": "US",
"category": "Hosting",
"requests": 2
}
]
},
"mixed_content": {
"upgrade_insecure": true,
"third_party_scripts": 0
},
"status": {
"up": true,
"code": 200,
"timings": {
"dns": 2,
"tls": 16,
"wait": 415,
"connect": 6,
"download": 15
},
"response_ms": 454
},
"tls_connection": {
"alpn": "h2",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1",
"TLSv1.1",
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
},
"ports": {
"open": [
80,
443,
8080
]
},
"carbon": {
"bytes": 189713,
"co2_grams": 0.0069,
"cleaner_than": 8
},
"dns_server": {
"ns": [
{
"ip": "172.64.32.158",
"host": "gene.ns.cloudflare.com"
},
{
"ip": "172.64.35.98",
"host": "bjorn.ns.cloudflare.com"
}
],
"zone": "rainbetes.com"
},
"cookies": {
"cookies": [
{
"name": "_lscache_vary",
"secure": true,
"http_only": true
},
{
"name": "p2_popup_unique_name",
"same_site": "Lax"
}
]
},
"location": {
"ip": "2a06:98c1:3120::3",
"asn": "13335",
"org": "CloudFLARENET-EU",
"city": "London",
"country": "GB"
},
"ssl": {
"issuer": "Google Trust Services / WE1",
"subject": "rainbetes.com"
},
"dns": {
"A": [
"188.114.97.3",
"188.114.96.3"
],
"MX": [
"{\"exchange\": \"mail.rainbetes.com\", \"priority\": 0}"
],
"NS": [
"gene.ns.cloudflare.com",
"bjorn.ns.cloudflare.com"
],
"SOA": "{\"nsname\": \"bjorn.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2413532157, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
"TXT": [
"v=spf1 a mx ip4:37.1.222.175 ~all"
],
"AAAA": [
"2a06:98c1:3120::3",
"2a06:98c1:3121::3"
]
},
"dnssec": {
"ds": false,
"rrsig": false,
"dnskey": false
},
"hsts": {
"header": "max-age=31536000;",
"message": "HSTS header does not include all subdomains."
},
"http_security": {
"xFrameOptions": false,
"referrerPolicy": false,
"xXSSProtection": false,
"permissionsPolicy": false,
"xContentTypeOptions": false,
"contentSecurityPolicy": false,
"strictTransportPolicy": "max-age=31536000;",
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
},
"firewall": {
"waf": "Cloudflare",
"has_waf": true
},
"get_ip": {
"ip": "2a06:98c1:3121::3",
"family": 6
},
"redirects": {
"chain": [
"https://rainbetes.com"
]
},
"linked_pages": {
"external": [
"https://x.com/JohnRainbet",
"https://cookiedatabase.org/tcf/purposes/"
],
"external_count": 2,
"internal_count": 32
},
"whois": {
"registrar": "URL Solutions, Inc.",
"created": "2026-08-27T14:20:16Z",
"updated": "2026-08-28T09:07:05Z",
"expires": "2027-08-27T14:20:16Z",
"status": [
"clientTransferProhibited https://icann.org/epp"
],
"nameservers": [
"bjorn.ns.cloudflare.com",
"gene.ns.cloudflare.com"
]
},
"headers": {
"headers": {
"server": "cloudflare",
"content-type": "text/html; charset=UTF-8",
"strict-transport-security": "max-age=31536000;",
"link": "; rel=\"https://api.w.org/\", ; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", ; rel=shortlink"
}
}
}
}
```
## Complete dated records
Availability observations: https://phishdestroy.io/domain/rainbetes.com/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/rainbetes.com/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/rainbetes.com/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/rainbetes.com/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/rainbetes.com/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/rainbetes.com/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/rainbetes.com/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/rainbetes.com/records.json?source=content&format=json
## Dated availability observation
Latest stored reachability observation
```json
{
"state": "alive",
"label_key": "availability.active",
"detail_key": "detail.latest_reachability",
"params": [],
"source": "current_http_probe",
"record_id": 1643925,
"scope": "checked_url",
"observed_at": "2026-11-07T23:28:01Z",
"http_status": 200,
"http_observed_at": "2026-11-07T23:28:01Z",
"stored_http_code": 200,
"stored_http_observed_at": "2026-11-07T23:28:01Z",
"legacy_site_status": "alive",
"supports_outcome_badge": false,
"content_classification": "served_at_root",
"content_classification_at": "2026-11-07T23:08:38Z",
"registration_state": "unknown",
"policy": "20261102-dated-availability-v2"
}
```