rainbet[.]si

rainbet.si is a newly registered domain (creation date 2026-02-03) that has been observed hosting a generic phishing campaign. The domain resolves to the IPv4 address 188.114.96.3 and is delegated to the Cloudflare nameservers dakota.ns.cloudflare.com and miki.ns.cloudflare.com. Registration was performed through Dynadot Inc. VirusTotal reports that three out of ninety-one scanned security vendors flag the domain as malicious, confirming its suspicious nature. The current operational status is active, and no additional infrastructure details have been released. Because the site’s content has not been publicly harvested, the specific target brand or credential-stealing technique remains unknown. Defenders should consider immediate blocking of rainbet.si at perimeter and DNS layers, monitor traffic to 188.114.96.3 for anomalous connections, and institute threat-intel feeds that include this indicator. Continuous re-analysis is advised to capture any future changes to the payload or hosting configuration.