io-canada-28[.]com

This domain, io-canada-28.com, is flagged as a generic phishing site targeting users of the Canada 28 gambling platform, based on its page title '加拿大28官网首页入口｜走势数据同步' (translated: Canada 28 official website homepage entrance | trend data sync). The domain was registered on February 21, 2026, and is currently offline as of the report date. It resolved to IP 156.232.139.37, hosted in Hong Kong under AS134548 (DXTL Tseung Kwan O Service). Infrastructure analysis reveals a low-to-moderate detection rate, with 3 of 93 security vendors on VirusTotal flagging the domain, and it appears on one security blocklist, specifically PhishDestroy.

The SSL certificate is classified as R12, which may indicate a low-trust or automated issuance pattern. No additional details about the phishing kit, payload delivery mechanism, or specific user interaction methods are available from the provided data. Defenders should treat this domain as a confirmed malicious indicator, particularly for environments where gambling-related phishing poses a risk.

Block the domain and IP at perimeter security controls, and monitor for any attempts to access it from internal networks. The domain's current offline status does not preclude future reactivation, so retrospective log analysis for prior connections is recommended. Given the lack of widespread detection, this domain may represent a targeted or low-volume campaign, warranting inclusion in threat intelligence feeds for proactive blocking.