# PhishDestroy domain threat record: rainbett-official.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/rainbett-official.com/ Machine-readable companion: https://phishdestroy.io/domain/rainbett-official.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: unknown - First observed by PhishDestroy: 2026-10-22 13:02:07 UTC - Stored record updated: 2026-10-22 16:30:28 UTC - VirusTotal detections in the stored snapshot: 1/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: binance ## Stored infrastructure - Observed IP address: 188.114.97.1 - Registrar in stored WHOIS data: Spaceship, Inc. - Last stored HTTP status: 200 - Registration date (registry RDAP, rainbett-official.com): 2026-07-27 10:43:39 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a08d7f-568c-778c-a050-d1f8ddfc0948/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/rainbett-official.com - Certificate Transparency search: https://crt.sh/?q=%25.rainbett-official.com - Web Archive lookup: https://web.archive.org/web/*/https://rainbett-official.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added rainbett-official.com to its internal blocklist on 2026-10-22 after an automated intake detected a single malicious flag on VirusTotal. The recorded page title was “Rainbet: cos'è, come funziona, disponibilità legale e sicurezza del sito nel 2026”, and the observed excerpt did not contain clear impersonation or overt malicious functionality. How the scam works No specific fraud technique was observed on the page; the domain was flagged solely based on external detections. In general, domains with ambiguous or minimal content can be used as fronts for phishing, credential harvesting, or fraudulent crypto‑related services, but such behavior was not evidenced here. Evidence VirusTotal reported one malicious detection out of 92 engines on 2026-10-22, attributed to Bfore.Ai PreCrime. Google Safe Browsing checked on 2026-10-22 did not flag the URL. urlscan.io captured the site on 2026-09-11 and gave an overall clean verdict, while its engine scoring marked it malicious with a 95‑point score. External blocklists MetaMask and SEAL listed the domain as of 2026-10-22, OTX showed zero pulses on the same date, and PhishDestroy’s internal list marked the domain as blocked. Infrastructure The domain was registered with Spaceship, Inc. on 2026-07-27, giving it an age of 87 days at first sighting. Recorded IP addresses included 188.114.97.1 and related Cloudflare‑served addresses. The TLS certificate, issued by Google Trust Services, was valid from 2026-07-27 to 2026-10-25, and DNSSEC was not enabled for the zone. What to do Visitors should avoid entering login credentials, wallet addresses, or personal data on the site; if any were submitted, change passwords immediately. Organizations should block traffic to rainbett-official.com and its recorded IPs, review access logs for related connections, and apply standard web‑filtering policies while continuing to monitor reputable threat feeds for future activity. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a08d7f-568c-778c-a050-d1f8ddfc0948/ Cloudflare Radar report: https://radar.cloudflare.com/scan/5fb36f58-a452-4eb9-946a-9c769eeb51a4 Stored capture screenshot: https://urlscan.io/screenshots/01a08d7f-568c-778c-a050-d1f8ddfc0948.png Cloudflare Radar screenshot (2026-10-22T13:03:37Z): https://screenshots.phishdestroy.io/cf/5fb36f58-a452-4eb9-946a-9c769eeb51a4.png URLScan screenshot (2026-10-22T13:05:39Z): https://screenshots.phishdestroy.io/us/01a163b7-7da6-753a-92ab-a5e0e8e3201b.png URLScan capture report: https://urlscan.io/result/01a163b7-7da6-753a-92ab-a5e0e8e3201b/ VirusTotal report: https://www.virustotal.com/gui/domain/rainbett-official.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=rainbett-official.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 13:06:25 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a08d7f-568c-778c-a050-d1f8ddfc0948.png Captured: 2026-10-22 13:02:07 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a08d7f-568c-778c-a050-d1f8ddfc0948.png Source report: https://urlscan.io/result/01a08d7f-568c-778c-a050-d1f8ddfc0948/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/5fb36f58-a452-4eb9-946a-9c769eeb51a4.png Captured: 2026-10-22 13:03:37 UTC Source report: https://radar.cloudflare.com/scan/5fb36f58-a452-4eb9-946a-9c769eeb51a4 SHA-256: a4ed20b0cb44e671ec8a857eed49801d9304455acc44c1440d96b3264e074820 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a163b7-7da6-753a-92ab-a5e0e8e3201b.png Captured: 2026-10-22 13:05:39 UTC Source report: https://urlscan.io/result/01a163b7-7da6-753a-92ab-a5e0e8e3201b/ SHA-256: d6a82cba854c92911d639131740b668293de35d188b170f7cfa3434c597ff875 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T13:03:29Z", "uuid": "01a08d7f-568c-778c-a050-d1f8ddfc0948", "scanned_at": "2026-09-10T22:45:34Z", "final_url": "https://rainbett-official.com/", "status": 200, "ip": "188.114.97.3", "ips": [ "188.114.97.3" ], "asns": [ "13335" ], "link_domains": [ "rain-bet.co.it", "rainbet.it", "rainbet.com", "spesf.pt", "tribuna.com", "coinstats.app", "eu-rainbet.com", "notopening.com" ], "doc_hash": "fbe74b53e99c71e6a35ff81da86c5a4a717e09699b7dcce6db35a3ee31866289", "globals": [ "initOneSaHeader", "syncFaqPanel", "initFaqAccordions", "initOneSaScrollTop", "decodeDataHref", "initDataHrefButtons", "__siteDataHrefButtonsInitialized", "FAQ_READY_ATTR" ], "tls": { "san": [ "rainbett-official.com", "*.rainbett-official.com" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "rainbett-official.com", "protocol": "QUIC", "valid_to": "2026-10-25T10:58:26Z", "valid_from": "2026-07-27T09:59:49Z" }, "domain_age_days": 45, "apex_age_days": 45, "tls_age_days": 45, "tls_valid_days": 90, "requests": 41, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 95, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T13:05:39Z", "uuid": "5fb36f58-a452-4eb9-946a-9c769eeb51a4", "scanned_at": "2026-10-22T13:03:37Z", "final_url": "https://rainbett-official.com/", "status": 200, "history": [ { "url": "https://rainbett-official.com/", "status": 200 } ], "dom_hash": "1b9e16281f8487165d093278dcc7efefa5b94c67a25d0d4c99f3dd08d920fa1a", "doc_hash": "c2a8db8e746dd5b01ecc29bfce740b6365ac79ea21a814097f8fda9f5aba9c0e", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "rainbett-official.com", "type": "A", "value": "188.114.96.0" }, { "name": "rainbett-official.com", "type": "A", "value": "188.114.97.0" }, { "name": "rainbett-official.com", "type": "AAAA", "value": "2a06:98c1:3121::" }, { "name": "rainbett-official.com", "type": "AAAA", "value": "2a06:98c1:3120::" } ], "dnssec_valid": false, "ip": "188.114.96.0", "whois": { "registrar": "Spaceship, Inc.", "created": "2026-07-27T10:43:39Z", "updated": "2026-07-27T10:57:35Z", "expires": "2027-07-27T10:43:39Z", "nameservers": [ "marek.ns.cloudflare.com", "opal.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T13:03:23Z", "analysis_at": "2026-10-22T09:58:49Z", "stats": { "timeout": 0, "harmless": 54, "malicious": 1, "suspicious": 0, "undetected": 37 }, "detections": { "Bfore.Ai PreCrime": "malicious" }, "reputation": 0, "popularity": { "Majestic": 477115 }, "registrar": "Spaceship, Inc.", "created": "2026-07-27T10:43:39Z", "expires": "2027-07-27T10:43:39Z", "updated": "2026-07-27T10:57:35Z", "first_seen": "2026-07-27T11:26:23Z", "dns": [ { "ttl": 300, "type": "A", "value": "104.21.3.34" }, { "ttl": 300, "type": "A", "value": "172.67.130.41" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "marek.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "marek.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3036::6815:322" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3032::ac43:8229" }, { "ttl": 21600, "type": "NS", "value": "opal.ns.cloudflare.com" } ], "dns_at": "2026-10-22T10:16:43Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "rainbett-official.com", "*.rainbett-official.com" ], "issuer": "Google Trust Services / WE1", "serial": "656da5307819ada30e54c6c76d5c9436", "sha256": "fdbc7723ce19d37d3c6db1982243019450b66329fc5eaea906b109b394e05bc9", "subject": "rainbett-official.com", "valid_to": "2026-12-23T11:46:52Z", "valid_from": "2026-09-24T10:46:57Z" }, "whois": { "registrar": "Spaceship, Inc.", "registrar_iana_id": "3862", "registrar_url": "http://www.spaceship.com", "created": "2026-07-27T10:43:39Z", "updated": "2026-07-27T10:57:35Z", "expires": "2027-07-27T10:43:39Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "marek.ns.cloudflare.com", "opal.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "last changed": "2026-08-23T09:12:18Z", "registration": "2026-07-27T10:43:39Z", "registrar expiration": "2027-07-27T10:43:39Z", "last update of RDAP database": "2026-10-18T06:18:26Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T13:06:00Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "rainbett-official.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-22T13:05:25Z", "first": "2026-08-29T00:03:58Z", "changes": 3, "days_archived": 4, "scans_per_day": 0.06, "avg_page_bytes": 36926 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://rainbett-official.com/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 48 }, "social_tags": { "ogUrl": "https://rainbett-official.com/", "title": "Rainbet: cos'è, come funziona, disponibilità legale e sicurezza del sito nel 2026", "ogType": "website", "robots": "index, follow", "ogImage": "/media/0db8184d7f9b.jpg", "ogTitle": "Rainbet: cos'è, come funziona, disponibilità legale e sicurezza del sito nel 2026", "ogSiteName": "Rainbet", "description": "Guida completa a Rainbet aggiornata al 2026: cos'è la piattaforma crypto, come registrarsi, giochi e bonus disponibili, dove è legale, rischi VPN e segnali di affidabilità per il giocatore italiano.", "canonicalUrl": "https://rainbett-official.com/it-it/", "ogDescription": "Guida completa a Rainbet aggiornata al 2026: cos'è la piattaforma crypto, come registrarsi, giochi e bonus disponibili, dove è legale, rischi VPN e segnali di affidabilità per il giocatore italiano." }, "trackers": { "requests": 28 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 3, "tls": 51, "wait": 36, "connect": 14, "download": 22 }, "response_ms": 126 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 245853, "co2_grams": 0.009, "cleaner_than": 2 }, "dns_server": { "ns": [ { "ip": "172.64.33.202", "host": "marek.ns.cloudflare.com" }, { "ip": "108.162.194.100", "host": "opal.ns.cloudflare.com" } ], "zone": "rainbett-official.com" }, "location": { "ip": "2a06:98c1:3121::9", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "rainbett-official.com" }, "dns": { "A": [ "188.114.97.9", "188.114.96.9" ], "NS": [ "opal.ns.cloudflare.com", "marek.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"marek.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415736138, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3121::9", "2a06:98c1:3120::9" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000; includeSubDomains", "message": "HSTS header does not contain the preload directive." }, "http_security": { "xFrameOptions": "DENY", "referrerPolicy": "strict-origin-when-cross-origin", "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31536000; includeSubDomains", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3121::9", "family": 6 }, "redirects": { "chain": [ "https://rainbett-official.com" ] }, "rank": { "domain": "rainbett-official.com" }, "tech_stack": { "technologies": [ "Tailwind CSS", "Priority Hints", "HSTS", "Cloudflare", "Open Graph", "HTTP/3" ] }, "linked_pages": { "external": [ "https://rainbet.com/", "https://rainbet.com/aml", "https://spesf.pt/", "https://coinstats.app/", "https://rain-bet.co.it/", "https://rainbet.it/", "https://tribuna.com/", "https://eu-rainbet.com/", "https://notopening.com/", "https://rainbet.it/mobile" ], "external_count": 10, "internal_count": 59 }, "whois": { "registrar": "Spaceship, Inc.", "created": "2026-07-27T10:43:39Z", "updated": "2026-07-27T10:57:35Z", "expires": "2027-07-27T10:43:39Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "marek.ns.cloudflare.com", "opal.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-frame-options": "DENY", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } } } } ```