The domain rainbetonline-au.com was registered on May 28, 2026 through URL SOLUTIONS INC. and is currently resolving to the IP address 188.114.97.3. Its authoritative nameservers are alaric.ns.cloudflare.com and haley.ns.cloudflare.com, indicating that the domain is hosted behind Cloudflare’s DNS infrastructure.
VirusTotal has recorded four positive detections out of ninety‑one submitted scanners, confirming that multiple security engines have identified malicious behavior associated with this host. The domain appears on three external security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing its classification as a high‑risk phishing resource. No public page title, SSL certificate details, HTTP response codes, or content snapshots have been disclosed, so the exact appearance and payload of the site remain unknown.
Defenders should prioritize adding rainbetonline-au.com to internal block and detection rules, monitor DNS queries for the 188.114.97.3 address, and enforce outbound filtering that blocks traffic to the listed Cloudflare nameservers when associated with suspicious activity. Continuous re‑evaluation is advised, as the domain’s active status suggests ongoing operations and potential future updates to its malicious infrastructure.