rainbetofficial-au[.]com

rainbetofficial-au.com is currently listed as a high‑risk generic phishing infrastructure. The domain was registered through URL SOLUTIONS INC. and first observed on the DNS on 24 October 2025. DNS resolution points to the single IPv4 address 188.114.96.3, which is served by Cloudflare as indicated by the authoritative name servers apollo.ns.cloudflare.com and leah.ns.cloudflare.com. The domain appears on three public security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, confirming that multiple downstream filters consider it malicious.

VirusTotal has processed the domain with 91 scanning engines; none of the engines returned a positive classification at the time of analysis. While the absence of a detection does not guarantee safety, the combination of blocklist presence, registrar information, and hosting details supports a high confidence assessment of phishing intent.

No public SSL certificate details, HTTP response codes, page title, or content analysis have been published, leaving those vectors unverified. Consequently, defenders cannot confirm whether the site hosts a credential‑harvesting page or other malicious payloads, but the infrastructure pattern matches known phishing campaigns that leverage fast‑changing Cloudflare‑fronted domains.

Recommendations: network defenders should add 188.114.96.3 to deny lists, enforce DNS filtering for rainbetofficial-au.com, and monitor for any new subdomains or related IP activity. Security teams should also track future VirusTotal or sandbox submissions for this domain, as additional telemetry may reveal the exact phishing payload. Continuous observation of the three blocklists that have already flagged the domain is advised to capture any changes in classification.