rainbet-casino-aus[.]com

rainbet-casino-aus.com is currently hosting a site titled “RainBet Casino Australia – Online Pokies & Sports Betting”. The page returns HTTP 200 and presents a valid TLS certificate from Let’s Encrypt (issuer YE1). DNS resolution points to 81.28.12.12, an address allocated to GCORELABS in the Netherlands, and the authoritative nameservers are ns1.gcorelabs.net and ns2.gcdn.services. Service fingerprinting identified Nginx and the presence of HTTP Strict Transport Security. The domain was registered through Realtime Register B.V., and its infrastructure has been tagged by three public blocklists and by the PhishDestroy, MetaMask, and SEAL filtering services. Threat intelligence sources list the site in two AlienVault OTX pulses and note a “Crypto Gambling” scam type. VirusTotal scans show seven of ninety‑one AV engines flagging the domain as malicious. The combination of a high‑risk classification, active status, and multiple detections suggests the site is used to lure victims into fraudulent gambling or cryptocurrency transactions. Defenders should add the domain and its resolved IP to block lists, monitor for DNS queries, and consider sink‑holing the host. Continuous re‑evaluation is advised because additional indicators may emerge as the campaign evolves.