gamdomcanada[.]com

Analysis of the domain gamdomcanada.com indicates it is an active phishing infrastructure targeting users with a fake online casino scheme. Registered on April 30, 2026, through NameCheap, Inc., the domain currently resolves to the IP address 188.114.96.3, hosted under Cloudflare, Inc. in Canada. The site employs Cloudflare nameservers (gabriella.ns.cloudflare.com and pedro.ns.cloudflare.com) and uses HTTP/3, WordPress, MySQL, and PHP technologies, alongside Cloudflare security services, which may obscure further detection efforts. The page title, 'Gamdom Canada: Exciting Casino Experience with Bonuses,' suggests an attempt to impersonate a gambling platform, though no legitimate affiliation with any known casino brand is confirmed in available data. The domain is associated with the 'Gambler Scam' phishing kit, a known framework used to deploy fraudulent gambling sites designed to harvest user credentials, financial details, or deposit funds under false pretenses. As of July 12, 2026, the domain remains active, returning an HTTP 200 status code. It appears on three security blocklists and is flagged by at least one vendor on VirusTotal, though broader detection remains limited. Defenders should note that the domain has a Gridinsoft trust score of 0/100, reinforcing its classification as high-risk. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the threat, as fraudulent sites commonly use valid certificates to appear legitimate. Organizations and users are advised to block this domain at the network level and monitor for related infrastructure, including associated IPs and nameservers. Given the use of Cloudflare, additional obfuscation techniques may be in place, requiring deeper behavioral analysis to identify connected campaigns. No further details on victim targeting or specific lures are available at this time.