Security Scan Report: rainbetwin.com

Redirected to:
https://rainbetlegit.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 4 domains to perform 69 HTTP transactions. The main domain is rainbetwin.com and was registered 1 year ago.

Submitted URL: https://rainbetwin.com/

Effective URL:
https://rainbetlegit.com/
Redirected

AI Security Verdict

High Risk

Confidence: 65%

7
Risk Score

Swedish-language affiliate funnel promoting the offshore Rainbet casino; both the serving and entry domains carry single-source phishing reports. No credential or payment forms were found, but the phishing indicator and unlicensed-gambling promotion warrant avoidance.

Risk Factors (5)
Threat-intel phishing report on the primary serving domain (single-source, unverified)
Threat-intel phishing report on the entry domain plus cross-domain redirect
Promotes an offshore casino with no Swedish licence to Swedish players, per the page's own account of the Spelinspektionen block
Affiliate funnel steering visitors to multiple offshore gambling sites via ranked bonus listings
Right-click/context-menu blocking enabled in JavaScript
Domain age information unavailable

Details

Page Title

Rainbet Sverige - Licens, KYC och Spelarskydd

Scan Type

public

Domain Name Analysis

The domain 'rainbetwin.com' uses the commercial generic top-level domain (.com) with no subdomain. The core label 'rainbetwin' covers 10 characters holding four vowels versus six consonants. Splitting it apart reveals 3 words: rain, be, twin. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rainbetwin.com/

Page Load Overview

9.55s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv-SE
Text Length:22,562 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software41% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
41%
corporate
35%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1785.121.179.45Moldova
AS48753Ava Host Srl
13188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1334.120.31.228Google · CDNKansas City, Missouri, United States
AS396982Google LLC
13104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
695--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D554EA2B46B624A93A37737C9F9A6209126D9007CB15CDF4B9CEC148CFCDA9588F670D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:2jNFBzk6v2n1oz/ADpNJoqIt6M9AboiVloJYhgGBOl9jEk7w8o:2H2n1QADpNJy2ol6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:298842:YdIQ4cAQgUgzjTCFIDAB2ghDMEKIgJk4oA9eowqkipkMhQAOCAAACLDKAxA1cAAQH0CQBCMB30kkIYKFIwKRIlZlAkEIIpAR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000038ffff00
Perceptual Hash:e2639c9d18b43367
Difference Hash:ccc14d49696116d5
Wavelet Hash:002020183cffffff
Color Hash:#a487c5

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data