rainbets[.]co[.]uk

Analysis of rainbets.co.uk indicates that the domain is actively being used in a generic phishing campaign as of the report date, July 23, 2026. The domain resolves to the IP address 104.21.90.30, which is serviced by Cloudflare’s network, and it was originally registered on October 24, 2025 through Hosting Concepts B.V., identified as a European Union registrar. VirusTotal records show that the domain has been scanned by 95 antivirus and malware vendors, with none reporting a detection at the time of review; this absence of detections does not constitute a safety assurance.

The domain is currently listed on one security blocklist and is actively blocked by the PhishDestroy mitigation service, suggesting that threat intelligence feeds have identified malicious activity associated with the host. Authoritative name servers for the domain are frida.ns.cloudflare.com and walt.ns.cloudflare.com, confirming reliance on Cloudflare DNS infrastructure. No publicly available page title, content, or SSL certificate details have been disclosed in the available intelligence, leaving the specific phishing lure and credential‑capture mechanisms undefined.

The combination of recent domain creation, Cloudflare hosting, inclusion on a blocklist, and active blocking by PhishDestroy warrants continued monitoring. Defensive recommendations include adding rainbets.co.uk to local deny lists, enforcing DNS‑level filtering, and observing any outbound connections to the resolved IP address for potential data exfiltration. Ongoing telemetry should be collected to capture any future changes in detection status or content analysis.