rainbet-deutschland[.]de

rainbet-deutschland.de is currently classified as a high‑risk generic phishing site. The domain resolves to the IPv4 address 188.114.96.3 and is hosted behind Cloudflare nameservers felipe.ns.cloudflare.com and oaklyn.ns.cloudflare.com. VirusTotal records indicate that the domain has been examined by 95 scanning engines, and none of those engines reported a detection at the time of analysis.

Despite the lack of vendor alerts, the domain appears on three external blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, confirming that security communities consider it malicious. The threat status remains active as of the report date, July 22 2026, and no evidence of remediation has been observed. The combination of an active phishing classification, presence on multiple blocklists, and dedicated blocking by well‑known anti‑phishing services warrants immediate mitigation.

Defenders should add 188.114.96.3 to network‑level deny lists, enforce DNS filtering for rainbet-deutschland.de, and monitor Cloudflare name‑server changes for potential relocation. Continuous re‑scanning with multi‑vendor services is recommended to capture any future payloads or indicator updates. Because the domain lacks a publicly disclosed SSL certificate or HTTP response details, further probing may be required to confirm the service behavior, but the existing evidence already justifies a high‑severity response.