rabonabetde[.]com

Analysis of rabonabetde.com, identified on July 25 2026 as a high‑risk generic phishing site, shows multiple indicators of malicious intent. The domain was registered on February 23 2026 through NiceNIC International Group Co., Limited and immediately began resolving to 104.21.24.227, an IP address owned by Cloudflare (AS13335). Both authoritative nameservers are Cloudflare‑hosted (gabriella.ns.cloudflare.com and marvin.ns.cloudflare.com), and the site serves traffic over HTTPS with a certificate issued by Google Trust Services (WE1). HSTS and HTTP/3 are enabled, confirming a modern Cloudflare edge configuration.

HTTP response code 200 is returned for the front page, and the page title reads “Rabona Bet Test & Erfahrungen 2025: 200€ Bonus im Check,” which ties the site to a crypto‑gambling promotion offering a €200 bonus. This title aligns with the intelligence that classifies the threat as a crypto gambling scam. VirusTotal reports that 2 of 93 scanning engines flag the domain, and it appears on a known security blocklist, with PhishDestroy actively blocking it. Additionally, Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment.

While the exact content beyond the title has not been publicly analysed, the combination of a newly created domain, Cloudflare fronting, a promotional gambling title, and detections by multiple security vendors strongly suggests a phishing operation aimed at harvesting credentials or financial information from users seeking the advertised bonus. Uncertainties remain regarding the specific payload or credential‑capture mechanisms employed, as no further page analysis is available. Defenders are advised to immediately block rabonabetde.