rainbet-uk[.]eu[.]com

Analysis of rainbet-uk.eu.com as of July 23, 2026 shows the domain is currently active and associated with generic phishing attempts. The domain resolves to the IP address 104.21.54.17 and is hosted on Cloudflare, as indicated by its authoritative nameservers diva.ns.cloudflare.com and venkat.ns.cloudflare.com. It appears on one external security blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that at least one reputable anti‑phishing source classifies it as malicious.

VirusTotal records indicate the domain has been scanned by 95 commercial engines; while none of those engines raised a detection, the absence of detections does not constitute evidence of safety and should be interpreted as a lack of current signatures rather than a clean bill of health. No public information about the registrar, registration dates, SSL certificate details, HTTP response codes, Safe Browsing status, AlienVault OTX references, or page title is available in the supplied intelligence, leaving those facets of the infrastructure unverified. Given the confirmed blocklist listing, active status, and Cloudflare hosting that can be leveraged for rapid domain turnover, defenders should treat rainbet-uk.eu.com as a high‑confidence phishing indicator.

Recommended mitigations include adding the domain to local blocklists, updating proxy and DNS filtering policies to deny traffic to the resolved IP 104.21.54.17, and monitoring for any emerging sightings in additional threat feeds. Continuous re‑evaluation is advised, as the domain’s risk level remains under investigation and further evidence may emerge.