rainbetpromotions[.]com

Analysis of the domain rainbetpromotions.com indicates it is under investigation for phishing activity targeting online betting or gambling users. The domain was registered on August 30, 2025, through HOSTINGER operations, UAB, and currently resolves to the IP address 195.179.238.13. Infrastructure review shows it uses nameservers ns1.dns-parking.com and ns2.dns-parking.com, a configuration often associated with low-cost or automated hosting environments commonly exploited for phishing campaigns. As of July 23, 2026, the domain appears on one security blocklist, specifically PhishDestroy, which suggests prior detection of malicious behavior.

No detections were reported by the 95 vendors that scanned the domain on VirusTotal, though the absence of flags does not confirm safety. The domain remains active, and its content has not been fully analyzed to determine the exact nature of the phishing scheme or the specific brand or platform being impersonated. Defenders should treat this domain as suspicious based on its presence on a security blocklist and its hosting characteristics.

Network-level blocking at the IP 195.179.238.13 and nameserver level is recommended pending further analysis. Monitoring for additional detections or changes in infrastructure, such as shifts in IP or nameserver assignments, may provide further insight into the campaign's scope. No SSL or HTTP status details are currently available, and the domain's page title and specific phishing kit remain unconfirmed.