rainbetoffiziell[.]de

This domain is flagged as a generic phishing threat with a high risk level and remains active as of July 18, 2026. Infrastructure analysis shows the domain resolves to IP address 172.67.138.164 and uses Cloudflare nameservers (chloe.ns.cloudflare.com and sergi.ns.cloudflare.com). VirusTotal data indicates that 6 of 91 security vendors flag this domain as malicious, providing a moderate detection rate that supports the high-risk classification. The exact brand or website content has not been analyzed, so the specific scam type or targeted service is unknown; the domain name suggests a potential association with a gambling or betting platform, but this cannot be confirmed without further investigation. The domain remains operational, meaning potential victims may still be exposed to phishing attempts. Defenders should block access to this domain at the network level, monitor for any associated IP addresses or subdomains, and review logs for any user interactions that may indicate compromise. Given the active status and vendor flags, immediate containment and user awareness alerts are recommended.