rainbets-canada[.]com

rainbets-canada.com was registered on July 11 2026 through Gransy, s.r.o. and is currently active. The domain resolves to the IPv4 address 188.114.96.3 and uses Cloudflare DNS infrastructure (david.ns.cloudflare.com, raphaela.ns.cloudflare.com). VirusTotal scans show that four of ninety‑one security vendors have flagged the domain, indicating that at least a subset of automated scanners consider it malicious.

Independent blocklist providers have also listed the domain; it appears on three public blocklists and is explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services. No additional metadata such as page title, SSL certificate details, HTTP status codes, or Safe Browsing verdicts are available in the current intelligence set, so the exact content served by the site remains unverified. The combination of recent registration, Cloudflare name‑server usage, and early detection by multiple vendors suggests a purpose‑built malicious operation, likely intended for credential harvesting or fraud. Defenders should add rainbets-canada.com to outbound and inbound deny lists at perimeter firewalls, proxy servers, and DNS filtering solutions.

The associated IP address 188.114.96.3 should be monitored for unexpected traffic and, where possible, blocked at the network edge. Because the domain leverages Cloudflare’s shared infrastructure, additional domains hosted on the same name‑servers may be employed in parallel campaigns; threat‑hunters should query recent registrations that share the same registrar or name‑servers for similar patterns. Continuous re‑evaluation of the domain’s status on blocklists and any future VirusTotal or Safe Browsing updates is recommended to adapt mitigation controls promptly.