rainbet[.]org[.]es

This domain, rainbet.org.es, is flagged as a high-risk phishing site targeting users with a betting-themed scam. Analysis indicates the domain remains active as of July 18, 2026, and is listed on two security blocklists, including MetaMask and SEAL. The domain resolves to IP address 104.21.81.253 and uses an SSL certificate issued by Google Trust Services, which does not inherently validate legitimacy. While the page title matches the domain name (rainbet.org.es), no specific brand impersonation or phishing kit details are confirmed in available intelligence. Four of 95 security vendors on VirusTotal have detected this domain as malicious, though the exact nature of the threat—whether credential harvesting, payment fraud, or other malicious activity—remains unconfirmed without further analysis of the site's content or behavior. Defenders should treat this domain as hostile infrastructure and block it at the DNS or network level. Monitoring for connections to 104.21.81.253 may also help identify compromised hosts. Given its presence in one AlienVault OTX threat intelligence pulse, additional related indicators may exist in threat feeds. No registration or hosting provider details are currently available to assess potential takedown actions.