rainbetaustralia[.]net[.]betlive-fr[.]fr

Analysis of rainbetaustralia.net.betlive-fr.fr shows a domain registered through Edomains LLC and created on 19 January 2026. The domain resolves to the IPv4 address 45.83.193.180 and uses the authoritative nameservers dns1.hostiq.ua and dns2.hostiq.ua. It has been added to at least one public security blocklist and is currently blocked by the PhishDestroy feed, indicating that defensive teams have observed malicious activity associated with the host.

A VirusTotal scan was performed by 91 AV engines; none of the engines raised a detection at the time of analysis, but the absence of a flag does not constitute a safety guarantee. No public evidence of SSL/TLS certificates, HTTP response codes, Safe Browsing verdicts, OTX mentions, or page‑title metadata is available, so the surface‑web characteristics of the site remain unverified. The limited telemetry suggests the infrastructure is deliberately minimal, relying on a single IP address and Ukrainian‑hosted name servers, a pattern often seen in short‑lived phishing campaigns.

Defenders should continue to block the domain at DNS and proxy layers, monitor outbound connections to 45.83.193.180, and add the host to internal threat‑intel feeds. Ongoing surveillance is recommended to detect any future changes in hosting, certificate deployment, or content that could alter the risk profile.