ScanMalware.com

Security Scan Report: rainbetlegit.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b00ad35b-5780-452f-a2c5-1f63046b7070Domain and IP registration (RDAP)/api/v1/rdap/b00ad35b-5780-452f-a2c5-1f63046b7070How often this domain was scanned/api/v1/domain/stats/rainbetlegit.comScan history for this domain/api/v1/domain/history/rainbetlegit.com?limit=15
This website contacted 3 IPs in 2 countries across 3 domains to perform 68 HTTP transactions. The main domain is rainbetlegit.com and was registered 4 months ago.

Submitted URL: https://rainbetlegit.com/

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Affiliate review funnel for the offshore Rainbet casino; single-source phishing report on the primary domain plus obfuscated JS and right-click blocking. No credential or payment forms, no brand impersonation.

Risk Factors (5)
Single-source phishing threat-intel match on the primary domain (unverified community submission)
Promotion of an unlicensed offshore casino to Swedish players, with the page itself citing a Swedish regulator ban decision
Anti-analysis JavaScript: encoding/decoding inline functions and right-click blocking
Recent registration (119 days) and no domain reputation ranking
Affiliate-style bonus ranking lists steering users to offshore gambling brands
Domain age information unavailable

Details

Page Title

Rainbet Sverige - Licens, KYC och Spelarskydd

Scan Type

public

Domain Name Analysis

Domain 'rainbetlegit.com' uses the commercial generic top-level domain (.com) and has no subdomain. The core label 'rainbetlegit' covers 12 characters containing 5 vowels alongside seven consonants. It segments into three words: rain, bet, legit. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rainbetlegit.com/

Page Load Overview

5.33s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv-SE
Text Length:22,562 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software41% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
41%
corporate
35%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2485.121.179.45Moldova
AS48753Ava Host Srl
2234.120.31.228Google · CDNKansas City, Missouri, United States
AS396982Google LLC
22104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
683--

Detected Technologies10

Open-Graph-Protocolvwebsite
100%
WordPress
90%
PHP
50%
MySQL
50%
Nginx
40%
HSTS
40%
hCaptcha
30%
Yoast SEOv25.9
30%
Contact Form 7
20%
Complianz
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D554EA2B46B624A93A37737C9F9A6209126D9007CB15CDF4B9CEC148CFCDA9588F670D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:2jNFBzk6v2n1oz/ADpNJoqIt6M9AboiVloJYhgGBOl9jEk7w8o:2H2n1QADpNJy2ol6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:298842:YdIQ4cAQgUgzjTCFIDAB2ghDMEKIgJk4oA9eowqkipkMhQAOCAAACLDKAxA1cAAQH0CQBCMB30kkIYKFIwKRIlZlAkEIIpAR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000038ffff00
Perceptual Hash:e2639c9d18b43367
Difference Hash:ccc14d49696116d5
Wavelet Hash:002020183cffffff
Color Hash:#aed22d

Other Hashes

Crop Resistant:ccc14d49696116d5,45650d33b3310d21

Scan History

Scan history not available

Unable to load historical scan data