# PhishDestroy domain threat record: raintradeapp.cc Content language: English Canonical HTML report: https://phishdestroy.io/domain/raintradeapp.cc/ Machine-readable companion: https://phishdestroy.io/domain/raintradeapp.cc/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: unknown - First observed by PhishDestroy: 2026-10-26 16:19:42 UTC - Stored record updated: 2026-10-26 21:11:07 UTC - VirusTotal detections in the stored snapshot: 3/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 188.114.96.1 - Registrar in stored WHOIS data: Dominet (HK) Limited - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2025-12-03 11:15:06 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16d1f-64a1-77fa-9fb5-9f4f77f5fc87/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/raintradeapp.cc - Certificate Transparency search: https://crt.sh/?q=%25.raintradeapp.cc - Web Archive lookup: https://web.archive.org/web/*/https://raintradeapp.cc/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added raintradeapp.cc to its blocklist on 2026-10-26. The intake flagged the domain because VirusTotal recorded one malicious detection among 92 engines. An HTTP 200 response was recorded on 2026-10-24, but no page title or content was captured, so no specific malicious behavior was observed. How the scam works The available evidence does not demonstrate a concrete fraud technique; the domain is flagged solely due to security‑engine detections. In general, domains with similar flags may be used for phishing, credential harvesting, or crypto‑related scams, but none of those activities were confirmed on this site. Evidence VirusTotal (retrieved 2026-10-26, analysis 2026-10-23) reported 1 malicious, 2 suspicious and a total of 3 detections from 92 engines. URLScan (captured 2026-10-24) gave an overall clean verdict, yet its engine scoring marked the URL as malicious with a 98 % confidence score. Google Safe Browsing checked on 2026-10-26 reported no warning. OTX listed one pulse on 2026-10-26, and external blocklists checked on the same date returned zero hits, while PhishDestroy’s internal list marks the domain as blocked. Infrastructure The domain was registered with Dominet (HK) Limited on 2025-12-03, giving it an age of about 324 days at the time of capture. The recorded DNS entries pointed to Cloudflare addresses such as 188.114.97.3, and the site was observed behind Cloudflare’s WAF; the TLS certificate, issued by Google Trust Services, was valid until 2026-12-24. No DNSSEC records were observed. What to do Visitors should avoid entering any credentials or personal data on raintradeapp.cc; if they have already done so, they should change affected passwords and monitor accounts for suspicious activity. Organizations can block the domain at the DNS or proxy level and review logs for connections to the recorded IP addresses. Continue monitoring reputable threat feeds for any future re‑classification of the domain. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16d1f-64a1-77fa-9fb5-9f4f77f5fc87/ Cloudflare Radar report: https://radar.cloudflare.com/scan/0d064d98-5b29-44cd-9946-b3d5481f7d36 Stored capture screenshot: https://urlscan.io/screenshots/01a16d1f-64a1-77fa-9fb5-9f4f77f5fc87.png Cloudflare Radar screenshot (2026-10-26T16:30:33Z): https://screenshots.phishdestroy.io/cf/0d064d98-5b29-44cd-9946-b3d5481f7d36.png URLScan screenshot (2026-10-23T18:58:21Z): https://screenshots.phishdestroy.io/us/01a16a20-b2d1-730c-b91e-f7c43fd1da26.png URLScan capture report: https://urlscan.io/result/01a16a20-b2d1-730c-b91e-f7c43fd1da26/ URLScan screenshot (2026-10-23T19:31:10Z): https://screenshots.phishdestroy.io/us/01a16a3e-c587-720e-b23e-d20588452ee7.png URLScan capture report: https://urlscan.io/result/01a16a3e-c587-720e-b23e-d20588452ee7/ VirusTotal report: https://www.virustotal.com/gui/domain/raintradeapp.cc Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=raintradeapp.cc Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-26 16:37:36 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a16d1f-64a1-77fa-9fb5-9f4f77f5fc87.png Captured: 2026-10-26 16:19:42 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a16d1f-64a1-77fa-9fb5-9f4f77f5fc87.png Source report: https://urlscan.io/result/01a16d1f-64a1-77fa-9fb5-9f4f77f5fc87/ - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16a20-b2d1-730c-b91e-f7c43fd1da26.png Captured: 2026-10-23 18:58:21 UTC Source report: https://urlscan.io/result/01a16a20-b2d1-730c-b91e-f7c43fd1da26/ SHA-256: fce74336ec811af058793979e153e04fb32fb788fde6cdd53d8bbaee3ca13e32 - URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16a3e-c587-720e-b23e-d20588452ee7.png Captured: 2026-10-23 19:31:10 UTC Source report: https://urlscan.io/result/01a16a3e-c587-720e-b23e-d20588452ee7/ SHA-256: 1cde64215ac51556d8c7265ac6f768694a64168f04bb5d30dd13a42b94335c61 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/0d064d98-5b29-44cd-9946-b3d5481f7d36.png Captured: 2026-10-26 16:30:33 UTC Source report: https://radar.cloudflare.com/scan/0d064d98-5b29-44cd-9946-b3d5481f7d36 SHA-256: 7ac227d4ab4e36b54e9b9c2c0c82d88e58d0c93a4092fe149f932a537efe645e ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-26T16:32:58Z", "uuid": "01a16d1f-64a1-77fa-9fb5-9f4f77f5fc87", "scanned_at": "2026-10-24T08:55:44Z", "final_url": "https://raintradeapp.cc/", "status": 200, "ip": "188.114.97.3", "domains": [ "kf.dl237x.com", "ooudessd.oss-ap-southeast-1.aliyuncs.com" ], "ips": [ "47.79.48.159", "8.212.161.30", "188.114.97.3" ], "asns": [ "45102", "13335" ], "countries": [ "SG", "PH" ], "link_domains": [ "www.chatwoot.com" ], "doc_hash": "e94533352f04ba3e43ea70c93860ccdf11660cee485848de9442c9358b0d9aa0", "script_hashes": [ "cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151", "a910bf0ee13b6ae8b84f074f1c24813c0ead3dc4895ac10ec568db2567b78f94", "3904b25aa15a4303ab011fed504bff10853457942b3c23f4121c8b2889e4a077", "ee978c61974d99ef8b6d6d466e20f39cea8d0b8c084bcb9a1e2568042a1048c1", "376c7340bb190e57b6334073d3464f7fb12b35bec64ff341bb11c434d520ae9f", "38251667d5c03b9824ecce843923170e0dae19c887b67bd358b89c2e749fdbe3", "4699b2fed3971cb880e458e5a6d9d72182ab200f6ce97653656686d0c3e6225f" ], "globals": [ "TradingView", "addLink", "addMeta", "lib", "rem", "dpr", "__VUE_INSTANCE_SETTERS__", "__VUE_SSR_SETTERS__", "__INTLIFY_PROD_DEVTOOLS__", "__INTLIFY_JIT_COMPILATION__", "__INTLIFY_DROP_MESSAGE_COMPILER__", "__VUE_I18N_FULL_INSTALL__", "__VUE_I18N_LEGACY_API__", "setImmediate", "clearImmediate", "PubSub", "__config", "__theme", "__VUE__", "__vite_is_modern_browser", "chatwootSDK", "chatwootSettings", "$chatwoot", "playAudioAlert" ], "cookies": [ "p_uv_id", "cw_conversation" ], "storage_keys": [ "rainbow_THEME", "main", "rainbow_LANGUAGE" ], "tls": { "san": [ "raintradeapp.cc", "*.raintradeapp.cc" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "raintradeapp.cc", "protocol": "QUIC", "valid_to": "2026-12-24T00:16:41Z", "valid_from": "2026-09-24T23:19:06Z" }, "domain_age_days": 324, "apex_age_days": 324, "tls_age_days": 29, "tls_valid_days": 90, "requests": 110, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html" } }, "cf": { "v": 1, "fetched_at": "2026-10-26T16:33:16Z", "uuid": "0d064d98-5b29-44cd-9946-b3d5481f7d36", "scanned_at": "2026-10-26T16:30:33Z", "final_url": "https://raintradeapp.cc/", "status": 200, "history": [ { "url": "https://raintradeapp.cc/", "status": 200 } ], "dom_hash": "e916f36c0d8f2aa2e3495745150208478366587898fc600cb69781929629d3f3", "doc_hash": "21c684bdc8c687dc217b4b6dfaadfc24ca5401d810e7c38c367400a6d85232f4", "phishing_v2": [ "phishing" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "raintradeapp.cc", "type": "A", "value": "188.114.97.0" }, { "name": "raintradeapp.cc", "type": "A", "value": "188.114.96.0" }, { "name": "raintradeapp.cc", "type": "AAAA", "value": "2a06:98c1:3121::" }, { "name": "raintradeapp.cc", "type": "AAAA", "value": "2a06:98c1:3120::" } ], "dnssec_valid": false, "ip": "188.114.97.0", "whois": { "registrar": "Dominet (HK) Limited", "created": "2025-12-03T12:15:06Z", "updated": "2025-12-03T12:24:37Z", "expires": "2026-12-03T12:15:06Z", "nameservers": [ "andy.ns.cloudflare.com", "ashley.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-26T16:28:05Z", "analysis_at": "2026-10-23T19:14:02Z", "stats": { "timeout": 0, "harmless": 53, "malicious": 1, "suspicious": 2, "undetected": 36 }, "detections": { "SOCRadar": "suspicious", "alphaMountain.ai": "suspicious", "Forcepoint ThreatSeeker": "malicious" }, "reputation": 0, "categories": { "alphaMountain.ai": "Suspicious (alphaMountain.ai)" }, "registrar": "Dominet (HK) Limited", "created": "2025-12-03T12:15:06Z", "expires": "2026-12-03T12:15:06Z", "updated": "2025-12-03T12:24:37Z", "first_seen": "2025-12-03T12:44:16Z", "dns": [ { "ttl": 300, "type": "A", "value": "104.21.17.165" }, { "ttl": 21600, "type": "NS", "value": "andy.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3031::ac43:b1b1" }, { "ttl": 21600, "type": "NS", "value": "ashley.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3034::6815:11a5" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "andy.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.177.177" } ], "dns_at": "2026-10-23T19:19:27Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "raintradeapp.cc", "*.raintradeapp.cc" ], "issuer": "Google Trust Services / WE1", "serial": "3906ced4dab82db60edfdc31c24f6e25", "sha256": "d9c0c2fa8c661303b95ea198797e975e5e6b02f98f45e41ae606ee6380d624c3", "subject": "raintradeapp.cc", "valid_to": "2026-12-24T00:16:41Z", "valid_from": "2026-09-24T23:19:06Z" }, "whois": { "registrar": "Dominet (HK) Limited", "registrar_iana_id": "3775", "registrar_url": "http://www.alibabacloud.com", "created": "2025-12-03T12:15:06Z", "updated": "2025-12-03T12:18:44Z", "expires": "2026-12-03T12:15:06Z", "status": [ "ok" ], "nameservers": [ "andy.ns.cloudflare.com", "ashley.ns.cloudflare.com", "clyde.ns.cloudflare.com", "lia.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "active" ], "events": { "expiration": "2026-12-03T12:15:06Z", "registration": "2025-12-03T12:15:06Z", "registrar expiration": "2026-12-03T12:15:06Z", "last update of RDAP database": "2025-12-03T12:15:07Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-26T16:37:09Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "raintradeapp.cc" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-26T16:30:35Z", "first": "2026-10-26T16:30:35Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 9273 }, "social_tags": { "robots": "all", "ogImage": "/platform/dev/logo_144.png?2.0.1772439726270", "themeColor": "#ffffff" }, "trackers": { "requests": 66 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 10, "tls": 27, "wait": 411, "connect": 19, "download": 1 }, "response_ms": 468 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 15160, "co2_grams": 0.0006, "cleaner_than": 63 }, "dns_server": { "ns": [ { "ip": "108.162.193.101", "host": "andy.ns.cloudflare.com" }, { "ip": "172.64.32.71", "host": "ashley.ns.cloudflare.com" } ], "zone": "raintradeapp.cc" }, "cookies": { "cookies": [ { "name": "p_uv_id", "http_only": true } ] }, "location": { "ip": "2a06:98c1:3121::3", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "raintradeapp.cc" }, "dns": { "A": [ "188.114.96.3", "188.114.97.3" ], "NS": [ "ashley.ns.cloudflare.com", "andy.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"andy.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416500221, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2a06:98c1:3120::3", "2a06:98c1:3121::3" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3121::3", "family": 6 }, "redirects": { "chain": [ "https://raintradeapp.cc" ] }, "whois": { "registrar": "Dominet (HK) Limited", "created": "2025-12-03T12:15:06Z", "updated": "2025-12-03T12:24:37Z", "expires": "2026-12-03T12:15:06Z", "status": [ "ok https://icann.org/epp" ], "nameservers": [ "andy.ns.cloudflare.com", "ashley.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html" } } } } ```