# PhishDestroy domain threat record: rainstrade.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/rainstrade.com/ Machine-readable companion: https://phishdestroy.io/domain/rainstrade.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: unknown - First observed by PhishDestroy: 2026-10-26 16:17:23 UTC - Stored record updated: 2026-10-26 21:11:07 UTC - VirusTotal detections in the stored snapshot: 1/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 188.114.97.1 - Registrar in stored WHOIS data: Dominet (HK) Limited - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2025-12-03 11:15:06 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16d1f-6029-756b-b810-74c2f7c42dfd/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/rainstrade.com - Certificate Transparency search: https://crt.sh/?q=%25.rainstrade.com - Web Archive lookup: https://web.archive.org/web/*/https://rainstrade.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added rainstrade.com to its internal blocklist on 2026-10-26 after an automated rule flagged the domain because VirusTotal reported a single malicious detection. The intake record notes that the page returned HTTP 200 but provided insufficient content for a concrete analysis, leaving the observed behavior unknown. This is the first date the domain was seen by PhishDestroy. How the scam works The current evidence does not identify a specific fraud technique; the domain is simply marked as suspicious based on external detections. In general, domains with such flags may be used for phishing, credential harvesting, or fraudulent crypto‑related offers, but no concrete mechanism was observed on this site. Evidence VirusTotal scanned the domain on 2026-10-23, logging one malicious detection out of 92 engines, attributed to Bfore.Ai PreCrime. Google Safe Browsing checked the site on 2026-10-26 and reported no threat. urlscan captured the page on 2026-10-24, marking the overall result as clean while its machine‑learning engine assigned a high malicious score of 97. OTX listed one pulse referencing the domain, and PhishDestroy’s own blocklist marks it as internal, whereas external blocklists returned zero hits on the same day. Infrastructure The domain was registered on 2025-12-03 through Dominet (HK) Limited. Hosting is provided via Cloudflare, with recorded IPv4 addresses in the 188.114.97.0/24 range and IPv6 addresses in the 2a06:98c1:3120::/64 block, and the TLS certificate issued by Google Trust Services is valid until 2026-12-23. DNS records show standard A, AAAA, and NS entries without DNSSEC signatures. What to do Do not submit any credentials, private keys, or wallet information to the site; if you have already done so, change passwords and monitor associated accounts for unauthorized activity. Organizations should add rainstrade.com to web‑filter and DNS blocklists and review any logs for connections to its IP ranges. Continue to monitor VirusTotal and other threat feeds for any new detections related to this domain. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16d1f-6029-756b-b810-74c2f7c42dfd/ Cloudflare Radar report: https://radar.cloudflare.com/scan/91d628e7-983f-4343-922e-9ee7df35b493 Stored capture screenshot: https://urlscan.io/screenshots/01a16d1f-6029-756b-b810-74c2f7c42dfd.png Cloudflare Radar screenshot (2026-10-26T16:44:04Z): https://screenshots.phishdestroy.io/cf/91d628e7-983f-4343-922e-9ee7df35b493.png URLScan screenshot (2026-10-23T18:58:32Z): https://screenshots.phishdestroy.io/us/01a16a20-af63-74dd-ac5b-7086692a6a4a.png URLScan capture report: https://urlscan.io/result/01a16a20-af63-74dd-ac5b-7086692a6a4a/ URLScan screenshot (2026-10-23T19:31:38Z): https://screenshots.phishdestroy.io/us/01a16a3e-da14-749b-be5f-ab2c714b779a.png URLScan capture report: https://urlscan.io/result/01a16a3e-da14-749b-be5f-ab2c714b779a/ URLScan screenshot (2026-10-26T16:32:06Z): https://screenshots.phishdestroy.io/us/01a1790d-e25a-729a-acdb-709677989666.png URLScan capture report: https://urlscan.io/result/01a1790d-e25a-729a-acdb-709677989666/ URLScan screenshot (2026-10-26T16:37:02Z): https://screenshots.phishdestroy.io/us/01a17912-60cd-715f-91ba-767d2071afe4.png URLScan capture report: https://urlscan.io/result/01a17912-60cd-715f-91ba-767d2071afe4/ VirusTotal report: https://www.virustotal.com/gui/domain/rainstrade.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=rainstrade.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-26 16:45:45 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a16d1f-6029-756b-b810-74c2f7c42dfd.png Captured: 2026-10-26 16:17:23 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a16d1f-6029-756b-b810-74c2f7c42dfd.png Source report: https://urlscan.io/result/01a16d1f-6029-756b-b810-74c2f7c42dfd/ - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16a20-af63-74dd-ac5b-7086692a6a4a.png Captured: 2026-10-23 18:58:32 UTC Source report: https://urlscan.io/result/01a16a20-af63-74dd-ac5b-7086692a6a4a/ SHA-256: fe735ee5dd4a004d032775c9a735c811c9c2a173a151cc6c993e021371b11f1d - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16a3e-da14-749b-be5f-ab2c714b779a.png Captured: 2026-10-23 19:31:38 UTC Source report: https://urlscan.io/result/01a16a3e-da14-749b-be5f-ab2c714b779a/ SHA-256: df3ce695eeda95f111b61246eece94247a44e1cee863fd5d0198a9abfe6c9599 - URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a1790d-e25a-729a-acdb-709677989666.png Captured: 2026-10-26 16:32:06 UTC Source report: https://urlscan.io/result/01a1790d-e25a-729a-acdb-709677989666/ SHA-256: 6736bb185396cce684466e2d22a78164331badab60cbbb1383024ebaa928c16a - URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a17912-60cd-715f-91ba-767d2071afe4.png Captured: 2026-10-26 16:37:02 UTC Source report: https://urlscan.io/result/01a17912-60cd-715f-91ba-767d2071afe4/ SHA-256: 2e25d82ca0343cea4a7e928c28db9d37f21efabae8c92acc93199d08e6374634 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/91d628e7-983f-4343-922e-9ee7df35b493.png Captured: 2026-10-26 16:44:04 UTC Source report: https://radar.cloudflare.com/scan/91d628e7-983f-4343-922e-9ee7df35b493 SHA-256: e474a175f992442a69e502e42d7748076f7b37bd4715cf7c03ed2b7ff55231c3 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-26T16:44:54Z", "uuid": "01a16d1f-6029-756b-b810-74c2f7c42dfd", "scanned_at": "2026-10-24T08:55:42Z", "final_url": "https://rainstrade.com/", "status": 200, "ip": "188.114.97.3", "domains": [ "kf.dl237x.com", "ooudessd.oss-ap-southeast-1.aliyuncs.com", "static.cloudflareinsights.com" ], "ips": [ "47.79.48.159", "8.212.161.30", "104.16.79.73", "188.114.97.3" ], "asns": [ "45102", "13335" ], "countries": [ "SG", "PH" ], "link_domains": [ "www.chatwoot.com" ], "doc_hash": "57bb833675e2f8cc2f442b97063107e1bd7a4cc4d111c718ee04662a2b184596", "script_hashes": [ "cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151", "a910bf0ee13b6ae8b84f074f1c24813c0ead3dc4895ac10ec568db2567b78f94", "3904b25aa15a4303ab011fed504bff10853457942b3c23f4121c8b2889e4a077", "ee978c61974d99ef8b6d6d466e20f39cea8d0b8c084bcb9a1e2568042a1048c1", "376c7340bb190e57b6334073d3464f7fb12b35bec64ff341bb11c434d520ae9f", "38251667d5c03b9824ecce843923170e0dae19c887b67bd358b89c2e749fdbe3", "4699b2fed3971cb880e458e5a6d9d72182ab200f6ce97653656686d0c3e6225f" ], "globals": [ "TradingView", "addLink", "addMeta", "lib", "rem", "dpr", "__VUE_INSTANCE_SETTERS__", "__VUE_SSR_SETTERS__", "__INTLIFY_PROD_DEVTOOLS__", "__INTLIFY_JIT_COMPILATION__", "__INTLIFY_DROP_MESSAGE_COMPILER__", "__VUE_I18N_FULL_INSTALL__", "__VUE_I18N_LEGACY_API__", "setImmediate", "clearImmediate", "PubSub", "__config", "__theme", "__VUE__", "__vite_is_modern_browser", "__cfBeacon", "chatwootSDK", "chatwootSettings", "$chatwoot", "playAudioAlert" ], "cookies": [ "p_uv_id", "cw_conversation" ], "storage_keys": [ "rainbow_THEME", "main", "rainbow_LANGUAGE" ], "tls": { "san": [ "rainstrade.com", "*.rainstrade.com" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "rainstrade.com", "protocol": "QUIC", "valid_to": "2026-12-23T18:43:30Z", "valid_from": "2026-09-24T17:44:49Z" }, "domain_age_days": 324, "apex_age_days": 324, "tls_age_days": 29, "tls_valid_days": 90, "requests": 111, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 97, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html" } }, "cf": { "v": 1, "fetched_at": "2026-10-26T16:44:56Z", "uuid": "91d628e7-983f-4343-922e-9ee7df35b493", "scanned_at": "2026-10-26T16:44:04Z", "final_url": "https://rainstrade.com/", "status": 200, "history": [ { "url": "https://rainstrade.com/", "status": 200 } ], "dom_hash": "90c64ecfa010ab0821e7c96d2336ccbe3c344b783f3c2457cbad662bf7df120f", "doc_hash": "57bb833675e2f8cc2f442b97063107e1bd7a4cc4d111c718ee04662a2b184596", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "rainstrade.com", "type": "A", "value": "188.114.97.0" }, { "name": "rainstrade.com", "type": "A", "value": "188.114.96.0" }, { "name": "rainstrade.com", "type": "AAAA", "value": "2a06:98c1:3120::" }, { "name": "rainstrade.com", "type": "AAAA", "value": "2a06:98c1:3121::" } ], "dnssec_valid": false, "ip": "188.114.97.0", "whois": { "registrar": "Dominet (HK) Limited", "created": "2025-12-03T12:15:06Z", "updated": "2025-12-03T12:25:38Z", "expires": "2026-12-03T12:15:06Z", "nameservers": [ "andy.ns.cloudflare.com", "ashley.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-26T16:42:38Z", "analysis_at": "2026-10-23T19:14:04Z", "stats": { "timeout": 0, "harmless": 56, "malicious": 1, "suspicious": 0, "undetected": 35 }, "detections": { "Bfore.Ai PreCrime": "malicious" }, "reputation": 0, "registrar": "Dominet (HK) Limited", "created": "2025-12-03T12:15:06Z", "expires": "2026-12-03T12:15:06Z", "updated": "2025-12-03T12:25:38Z", "first_seen": "2025-12-03T13:06:21Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2606:4700:3030::ac43:c479" }, { "ttl": 21600, "type": "NS", "value": "andy.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.36.156" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3035::6815:249c" }, { "ttl": 21600, "type": "NS", "value": "ashley.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "andy.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.196.121" } ], "dns_at": "2026-10-23T19:19:42Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "rainstrade.com", "*.rainstrade.com" ], "issuer": "Google Trust Services / WE1", "serial": "b6351221a32f06cf0e8b5dbb7acbc21e", "sha256": "cf9886c37b7ac5bf0c78ef1ba9e50c3aa6c40905cfed05166b4eef80dd08cf96", "subject": "rainstrade.com", "valid_to": "2026-12-23T18:43:30Z", "valid_from": "2026-09-24T17:44:49Z" }, "whois": { "registrar": "Dominet (HK) Limited", "registrar_iana_id": "3775", "registrar_url": "http://www.alibabacloud.com", "created": "2025-12-03T12:15:06Z", "updated": "2025-12-03T12:25:38Z", "expires": "2026-12-03T12:15:06Z", "status": [ "ok" ], "nameservers": [ "andy.ns.cloudflare.com", "ashley.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "active" ], "events": { "expiration": "2026-12-03T12:15:06Z", "registration": "2025-12-03T12:15:06Z", "registrar expiration": "2026-12-03T12:15:06Z", "last update of RDAP database": "2025-12-03T12:15:07Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-26T16:45:18Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "rainstrade.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-26T16:23:58Z", "first": "2026-10-26T16:23:58Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 9271 }, "robots_txt": { "agents": [ "*", "Amazonbot", "Applebot-Extended", "Bytespider", "CCBot" ], "present": true }, "social_tags": { "robots": "all", "ogImage": "/platform/dev/logo_144.png?2.0.1772439726270", "themeColor": "#ffffff" }, "trackers": { "requests": 16 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 11, "tls": 21, "wait": 431, "connect": 6, "download": 1 }, "response_ms": 470 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 15160, "co2_grams": 0.0006, "cleaner_than": 63 }, "dns_server": { "ns": [ { "ip": "172.64.32.71", "host": "ashley.ns.cloudflare.com" }, { "ip": "108.162.193.101", "host": "andy.ns.cloudflare.com" } ], "zone": "rainstrade.com" }, "cookies": { "cookies": [ { "name": "p_uv_id", "http_only": true } ] }, "location": { "ip": "2a06:98c1:3120::3", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "rainstrade.com" }, "dns": { "A": [ "188.114.96.3", "188.114.97.3" ], "NS": [ "ashley.ns.cloudflare.com", "andy.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"andy.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416533990, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3121::3", "2a06:98c1:3120::3" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3120::3", "family": 6 }, "redirects": { "chain": [ "https://rainstrade.com" ] }, "whois": { "registrar": "Dominet (HK) Limited", "created": "2025-12-03T12:15:06Z", "updated": "2025-12-03T12:25:38Z", "expires": "2026-12-03T12:15:06Z", "status": [ "ok https://icann.org/epp" ], "nameservers": [ "andy.ns.cloudflare.com", "ashley.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html" } } } } ```