casino[.]rainbetsite[.]com

This domain, casino.rainbetsite.com, is currently active and serves a crypto‑gambling phishing site identified by the page title “Rainbet Casino Italy – Crypto Casino & Sportsbook”. The site resolves to 183.81.169.24, an address allocated to Amarutu Technology Ltd. in the Netherlands. Registration was performed through URL Solutions, Inc., and the authoritative nameservers are ns1.pananames.com, ns2.pananames.com, ns3.pananames.com, and ns4.pananames.com. The domain appears on one security blocklist and has been blocked by PhishDestroy, indicating prior detection of malicious activity. HTTP requests return a 200 status code and the site presents a valid Let’s Encrypt certificate (YR2). The only confirmed threat vector is a generic phishing campaign targeting users interested in cryptocurrency gambling; no additional malicious payloads have been observed. Analysis cannot confirm the presence of credential‑stealing forms or malware, and while VirusTotal scans have not yielded detections, this does not constitute a safety assurance. Defenders should block the domain at the network perimeter, monitor DNS queries for the associated IP and nameservers, and treat any credential submissions to the site as potentially compromised. Ongoing observation is recommended to detect any evolution of the campaign.