canadarainbet[.]ca

Analysis of the domain canadarainbet.ca indicates a high‑risk, active phishing operation. The domain was registered on June 24, 2026 through DYNADOT LLC and uses Cloudflare name servers (decker.ns.cloudflare.com and mallory.ns.cloudflare.com). DNS resolution points to the IP address 104.21.53.145, a Cloudflare‑hosted address that does not reveal the underlying infrastructure.

The domain appears on three security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the assessment of malicious intent. VirusTotal has recorded scans from 95 antivirus and URL‑reputation vendors; none have raised a detection at the time of analysis, but the absence of a flag does not constitute evidence of safety. No additional intelligence such as SSL certificate details, HTTP response codes, page titles, or associated threat‑intel feeds (OTX, Safe Browsing, etc.) is available, leaving the exact content and targeted brand of the phishing lure unknown.

Given the recent creation date, active status, and inclusion on multiple blocklists, defenders should treat traffic to canadarainbet.ca as hostile. Recommended actions include denying any network communication to the domain, adding it to local and perimeter blocklists, monitoring for any DNS or HTTP requests originating from internal assets, and correlating logs for potential credential‑harvesting attempts. Continuous re‑evaluation is advised should new indicators, such as malicious payloads or victim reports, emerge.