rainbetfinland[.]com

Analysis of rainbetfinland.com indicates a high‑risk, active generic phishing operation. The domain was created on July 09, 2026 and registered through Gransy, s.r.o., a registrar that does not provide additional public transparency. DNS resolution points to the IPv4 address 188.114.97.3, and the authoritative nameservers are eoin.ns.cloudflare.com and mallory.ns.cloudflare.com, both belonging to Cloudflare’s global network.

The site is currently listed on three external security blocklists and has been explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering solutions, confirming that downstream security products recognize it as malicious content. VirusTotal records show that the domain was scanned by 91 antivirus and URL‑reputation vendors; at the time of the latest scan none of those engines flagged the domain, a result that does not constitute evidence of safety and should be interpreted as a detection gap rather than benign behavior. The public threat intelligence indicates the site remains active as of the report date, August 07, 2026, and retains a high risk rating.

Defenders should therefore enforce network‑level deny rules for rainbetfinland.com and its resolving IP address, incorporate the domain into URL filtering policies, and monitor Cloudflare‑associated name‑server changes for potential re‑hosting. Continuous re‑scanning on VirusTotal and other sandbox platforms is recommended to capture any future payload deployment, and any observed traffic to the domain should be logged for forensic correlation with credential‑theft incidents.