rain-bet[.]sk

Analysis of rain-bet.sk indicates that the domain was registered on February 3, 2026 through WEDOS Internet, a.s. and remains active as of the report date (July 16, 2026). DNS resolution points to the IP address 172.67.215.190, hosted on Cloudflare infrastructure with the authoritative name servers braelyn.ns.cloudflare.com and cory.ns.cloudflare.com. The domain has been referenced in a single AlienVault OTX pulse, confirming that it has already been observed by the threat‑intelligence community. No additional technical artifacts such as malware hashes, payload samples, or page content have been disclosed, and the site’s intended impersonated brand or lure type has not been identified. Given the recent creation date, active status, and association with a known threat pulse, defenders should treat rain-bet.sk as a potential phishing vector. Recommended mitigations include adding the domain to block lists, monitoring DNS queries for the associated IP address, and implementing URL filtering rules to prevent user access. Continuous observation is advised to capture any future changes in infrastructure or content that could clarify the campaign’s objectives.