rainbet-cz[.]cz

The domain rainbet-cz.cz has been identified as an active threat under investigation for generic phishing as of July 23, 2026. Registered through REG-GRANSY on March 16, 2026, this domain remains operational at the time of reporting. DNS analysis shows the domain is delegated to Cloudflare nameservers (newt.ns.cloudflare.com and sureena.ns.cloudflare.com) and currently resolves to IP address 104.21.36.7.

Rainbet-cz.cz appears on one security blocklist, specifically flagged by PhishDestroy, indicating at least one security vendor has classified the domain as malicious or suspicious in the context of phishing. Although a recent VirusTotal scan by 95 vendors returned no positive detections, this absence of flags must not be interpreted as evidence of safety, especially given the active blocklist presence. No additional detection data from other major security intelligence services, such as OTX or Safe Browsing, is available at this time.

The precise nature of the phishing activity is not documented in the available intelligence. There is no evidence provided regarding the page title, target brand, site content, or phishing kit usage. As a result, the specific tactics or lures used by this domain remain undetermined. The lack of further metadata and the ongoing activity status suggest defenders should exercise caution and continue monitoring for new threat intelligence. Security teams are advised to block rainbet-cz.cz at the network perimeter and track related infrastructure for potential expansion of phishing campaigns. Investigation is ongoing and updates should be sought as more data becomes available.