ontario[.]safedrivinggovay[.]cc

Analysis of the domain ontario.safedrivinggovay.cc indicates active phishing infrastructure targeting users of Ontario driver services. Registered on June 12, 2026, through Gname.com Pte. Ltd., the domain remains operational as of July 29, 2026. VirusTotal scans reveal that 10 of 91 security vendors flag this domain as malicious, while it appears on at least one security blocklist, specifically PhishDestroy.

The domain's registration details and naming convention—incorporating terms like 'ontario,' 'safe,' and 'drivinggov'—suggest an intent to impersonate official government or transportation-related services in Ontario, though the exact content of the site has not been analyzed to confirm this targeting. No additional details regarding hosting infrastructure, autonomous system number (ASN), or SSL certificate attributes are available. The domain's presence on a blocklist and its detection by multiple security vendors elevate its risk profile, though the absence of broader telemetry—such as Safe Browsing status or open-source intelligence (OSINT) reports—limits contextual assessment.

Defenders should treat this domain as high-risk for credential harvesting or fraudulent activity, particularly for users interacting with Ontario driver or vehicle services. Network-level blocking is recommended, alongside monitoring for related domains registered through the same registrar or incorporating similar naming patterns. Further investigation into associated IP addresses and hosting providers may reveal additional linked infrastructure.