rainbetgr[.]com

Analysis indicates that rainbetgr.com was registered on 17 December 2025 through NameMart Pte. Ltd. The domain is hosted on Cloudflare infrastructure, using the nameservers cruz.ns.cloudflare.com and west.ns.cloudflare.com, and resolves to the IP address 172.67.133.214. Since its creation the domain has been flagged as a generic phishing site and remains active as of the report date (23 July 2026). It is listed on one public security blocklist and has been explicitly blocked by the PhishDestroy filtering service. VirusTotal records show that the domain has been scanned by 95 security vendors; at the time of analysis none of the vendors returned a positive detection.

The absence of a detection does not confirm safety, as phishing payloads can be hosted on otherwise clean infrastructure. No additional public threat‑intel sources such as Google Safe Browsing, OTX, or SSL reputation services currently provide further context for this domain, and the exact page title or content has not been publicly analyzed, leaving the specific credential‑capture mechanism unknown. Defenders should treat rainbetgr.com as a high‑confidence malicious indicator.

Recommended actions include adding the domain to DNS‑ and proxy‑level block lists, integrating it into email‑gateway URL‑reputation filters, and monitoring network traffic for outbound connections to the associated Cloudflare IP range. If any user reports a login prompt from rainbetgr.com, treat the credentials as compromised and initiate incident response. Continuous re‑evaluation is advised, as future scans may generate detections or additional intelligence may surface.