login[.]albertagamingliquor[.]ca

This domain, login.albertagamingliquor.ca, has been identified as a credential phishing site designed to impersonate the Alberta Gaming, Liquor and Cannabis (AGLC) commission, a provincial regulatory body in Canada. Analysis indicates the site presents a fraudulent login interface titled 'Sign in to your account,' likely intended to harvest credentials from individuals accessing legitimate government or gaming-related services. No evidence of a cryptocurrency drainer kit or secondary payload delivery was observed, suggesting the primary objective is credential theft rather than financial asset compromise. Infrastructure analysis reveals the domain was registered on March 20, 2026, through Go Daddy Domains Canada, Inc., an atypical registrar choice for government-affiliated services. The domain resolves to IP address 34.186.196.233, hosted within the Google Cloud northamerica-northeast1 region, further deviating from expected government infrastructure patterns. Google Safe Browsing has flagged the domain as phishing, and it appears on one security blocklist. VirusTotal detection metrics report 26 out of 95 security vendors marking the domain as malicious, indicating moderate to high confidence in its fraudulent nature. As of the latest assessment, login.albertagamingliquor.ca has been taken offline, likely in response to detection and reporting by security entities. However, residual risk persists due to potential credential exposure from prior victims and the possibility of domain reactivation under altered infrastructure. Organizations and individuals are advised to monitor for unauthorized access attempts using credentials potentially compromised through this campaign. Network-level blocking of the associated IP and domain is recommended as a precautionary measure, alongside user education on recognizing government impersonation tactics in phishing attempts.