rainbetslots[.]net

Analysis of the domain rainbetslots.net indicates it is actively hosting a phishing site targeting online gambling users as of July 19, 2026. The domain resolves to IP address 69.165.75.129, located in Hong Kong and associated with VpsQuan L.L.C. Nameservers are hosted by Spaceship, Inc. (launch1.spaceship.net and launch2.spaceship.net), the same entity through which the domain was registered. The site returns an HTTP 200 status, confirming it is operational, and presents a page title explicitly referencing RAINBETSLOTS - PLATAFORMA OFICIAL, suggesting an attempt to impersonate an official gambling platform. Security vendors have flagged the domain, with 4 of 91 engines on VirusTotal detecting malicious activity. It appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites, providing no definitive indication of intent. No specific phishing kit or targeted brand beyond the page title has been confirmed in available data. Defenders should treat this domain as high-risk infrastructure. Blocking the domain and IP address at the network level is recommended, along with monitoring for related DNS resolutions or SSL certificate issuances under the same registrar. Further analysis of the site’s content and backend infrastructure may reveal additional indicators of compromise or connections to broader phishing campaigns.