rainbet-online[.]ch

rainbet-online.ch is currently active and resolves to the Cloudflare edge address 172.67.200.91. The domain is delegated to the authoritative nameservers glen.ns.cloudflare.com and kallie.ns.cloudflare.com, indicating use of Cloudflare's DNS service. Threat intelligence classifies the domain as generic_phishing, suggesting it may be leveraged to harvest credentials or other sensitive data. The domain was submitted to a multi‑vendor scanning service where 91 scanners evaluated the host; at the time of analysis no vendor reported a detection. Absence of detections does not imply benign intent, and the lack of publicly available page content means the specific lures or impersonated brands cannot be confirmed. The infrastructure, limited to a single IP address behind Cloudflare, may be part of a larger, rapidly provisioned phishing campaign that relies on the provider’s anonymity features. Defenders should block or monitor DNS queries for rainbet-online.ch, enforce TLS inspection where possible, and consider adding the IP 172.67.200.91 to threat‑intel feeds. Ongoing observation is recommended to detect any future content changes or additional infrastructure expansions.