rainbownex[.]net

The domain rainbownex.net was a generic phishing site posing no specific brand impersonation or drainer-kit functionality. It operated as a broad credential-harvesting page targeting users through deceptive login prompts. As of the latest verification, rainbownex.net has been taken offline, though it previously exhibited elevated risk due to its phishing activity.

Technical indicators confirm rainbownex.net was flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft and Trustwave, while appearing on 1 security blocklist (PhishDestroy). The domain was registered on 2025-07-22 14:30:58 via Gname.com Pte. Ltd. and resolved to IP address 188.114.96.3, hosted on Cloudflare’s infrastructure (AS13335). The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was '编组 21'. Google Safe Browsing did not flag the domain at the time of analysis, though Gridinsoft assigned it a trust score of 0/100. Technologies detected included Cloudflare and HTTP/3.

Users who interacted with rainbownex.net should immediately change any credentials entered on the site, enable two-factor authentication on affected accounts, and monitor for unauthorized access or fraudulent transactions. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader takedown efforts. If financial or cryptocurrency accounts were exposed, revoke any active token approvals and consider transferring funds to a new, secure wallet.