canada[.]ca[.]servicestaxe[.]top
Analysis as of July 29 2026 identifies the domain canada.ca.servicestaxe.top as an active generic phishing infrastructure. The domain was registered through Gname.com Pte. Ltd. on 27 September 2025. VirusTotal scans show that 15 of 91 security vendors have flagged the domain, indicating a moderate level of detection across AV engines. The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing its malicious classification.
The risk level is assessed as elevated, and the operational status remains active. Available intelligence does not disclose the hosting IP address, ASN, or SSL certificate details, and no page title or brand targeting information has been published. Consequently, defenders cannot attribute the site to a specific brand or confirm the exact phishing lure employed. Nonetheless, the combination of recent registration, multiple vendor detections, blocklist presence, and active blocking by PhishDestroy provides sufficient evidence to treat the domain as malicious.
Defensive recommendations include adding canada.ca.servicestaxe.top to DNS and proxy deny lists, configuring web filters to block HTTP requests to the domain, and monitoring outbound traffic for connections to the domain’s resolved IPs. Security operations should also incorporate the domain into threat‑intel feeds and consider automated containment actions for any detections. Continuous re‑evaluation is advised, as additional indicators such as hosting details or page content may emerge.
Network Security Intelligence
Threat Response Pipeline
Public Blocklist Status
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Registration: servicestaxe.top
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For the registrable domain servicestaxe.top behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive