rainbow-web-prod[.]pages[.]dev

The domain rainbow-web-prod.pages.dev is currently active and classified with an elevated risk rating. Infrastructure analysis shows that the domain resolves to the IP address 172.66.47.26 and is serviced by Cloudflare's name servers greg.ns.cloudflare.com and irena.ns.cloudflare.com. Registration details indicate the domain was provisioned through Cloudflare, Inc., a common registrar for fast‑deployment hosting. Detection data reveal that the domain appears on a single security blocklist and is actively blocked by the PhishDestroy service.

Google Safe Browsing classifies the site under the "social engineering" category, reinforcing the phishing assessment. VirusTotal scans report that nine of ninety‑one security vendors have flagged the domain, providing independent corroboration of malicious intent. While the available data confirm the domain's involvement in credential‑harvesting activity, no public information on the website's page title, SSL certificate, HTTP response codes, or specific phishing kit has been disclosed.

Consequently, the exact content and targeted brand, if any, remain uncertain. Defenders should prioritize immediate mitigation by adding the domain to network and endpoint blocklists, enforcing DNS sinkholing for the associated IP, and monitoring for any related C2 traffic. Ongoing intelligence collection is advised to capture any future changes in the domain's hosting configuration, detection scores, or content that could refine the threat profile.