rainbet-sports[.]live

Analysis of rainbet-sports.live indicates an active credential phishing domain targeting sports betting users. The domain resolves to IP address 104.21.81.248, which is associated with Cloudflare infrastructure. As of August 6, 2026, the domain appears on one security blocklist and is blocked by PhishDestroy, though it currently shows no detections from antivirus vendors in VirusTotal scans. The absence of vendor flags does not confirm safety, as phishing domains often evade initial detection during early deployment phases.

Infrastructure analysis reveals the domain uses Cloudflare hosting, which is frequently leveraged by threat actors to obscure origin servers and evade takedowns. The domain's registration details remain unconfirmed, and no specific phishing kit or brand impersonation has been identified in available data. The page title and exact content are not yet analyzed, limiting classification beyond generic credential harvesting targeting sports betting platforms.

Defenders should treat this domain as high-risk for credential theft. Recommended actions include blocking the domain and IP at perimeter security controls, monitoring for related indicators of compromise, and alerting users to potential phishing attempts referencing sports betting services. Further investigation is required to determine the full scope of the campaign, including any associated domains or infrastructure.