canada[.]ca[.]servicestaxe[.]top

Analysis as of July 29 2026 identifies the domain canada.ca.servicestaxe.top as an active generic phishing infrastructure. The domain was registered through Gname.com Pte. Ltd. on 27 September 2025. VirusTotal scans show that 15 of 91 security vendors have flagged the domain, indicating a moderate level of detection across AV engines. The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing its malicious classification.

The risk level is assessed as elevated, and the operational status remains active. Available intelligence does not disclose the hosting IP address, ASN, or SSL certificate details, and no page title or brand targeting information has been published. Consequently, defenders cannot attribute the site to a specific brand or confirm the exact phishing lure employed. Nonetheless, the combination of recent registration, multiple vendor detections, blocklist presence, and active blocking by PhishDestroy provides sufficient evidence to treat the domain as malicious.

Defensive recommendations include adding canada.ca.servicestaxe.top to DNS and proxy deny lists, configuring web filters to block HTTP requests to the domain, and monitoring outbound traffic for connections to the domain’s resolved IPs. Security operations should also incorporate the domain into threat‑intel feeds and consider automated containment actions for any detections. Continuous re‑evaluation is advised, as additional indicators such as hosting details or page content may emerge.