rainbetpromocode[.]com

Analysis shows rainbetpromocode.com was registered on July 05, 2025 through GoDaddy.com, LLC and remains active as of July 15, 2026. The domain resolves to IP address 165.22.228.123 and is served by Cloudflare nameservers lana.ns.cloudflare.com and viddy.ns.cloudflare.com, indicating use of a CDN and potential obscuring of the originating host. No detections have been reported by VirusTotal scanners, but the absence of detections does not constitute a safety guarantee. The domain is classified as a generic phishing site and is currently under investigation. Infrastructure details suggest a typical threat‑actor setup that leverages reputable DNS services to increase resilience and evade simple takedown attempts. Defenders should consider adding the domain to block lists, monitoring DNS query logs for outbound requests to the IP, and, where feasible, employing sinkholing techniques to capture any further malicious traffic. Continuous intelligence gathering on the hosting provider and any associated sub‑domains is recommended to refine detection rules and mitigate potential credential‑harvesting campaigns that may originate from this infrastructure.