rainbet-casino-canada-play[.]com

rainbet-casino-canada-play.com was registered on 2026-06-09 via Hosting Concepts B.V. d/b/a Registrar.eu and resolves to the Cloudflare‑protected address 172.67.140.174. The site serves over HTTPS with a certificate issued by Google Trust Services under the WE1 root, indicating a valid TLS chain. DNS resolution uses the Cloudflare authoritative nameservers denver.ns.cloudflare.com and kami.ns.cloudflare.com. HTTP response code is 200 and the page title returned is “Rainbet Casino Canada 🟨🟦 Review, Bonuses & Player Guide”, matching the “Gambler Scam” phishing kit identified in the payload analysis. The domain is listed on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal reports four detections out of 91 scanned vendors, and Gridinsoft assigns a trust score of 0/100. AlienVault OTX references the domain in a single threat‑intel pulse. Infrastructure observations show use of Cloudflare Browser Insights and HTTP/3, suggesting reliance on the CDN for scalability and evasion. While the page content has not been manually inspected, the combination of recent registration, targeted gambling‑related branding, low trust scores, multiple vendor detections, and inclusion in blocklists strongly indicates a high‑risk phishing operation aimed at luring casino players. Defenders should add the domain and its resolved IP to deny‑list rules, monitor DNS queries for similar Cloudflare‑hosted names, and consider feeding the indicator set to endpoint and web‑gateway filters. Continuous re‑evaluation is advised as the site remains active.