multitax[.]pk

On 2 August 2026, the domain multitax.pk was observed in multiple threat‑intelligence feeds as an active phishing infrastructure. VirusTotal reports that one out of ninety‑one scanned security vendors flagged the domain, indicating at least one vendor detected malicious behavior. The domain is listed on a single public blocklist and is actively blocked by the PhishDestroy service, which specializes in takedown of fraudulent sites.

No additional context such as page title, SSL certificate details, hosting IP, or registrar information is currently available in the intelligence feed, limiting the depth of the technical profile. The absence of further artefacts means that the exact impersonated brand, credential‑harvesting technique, or payload delivery method cannot be confirmed at this time. Nevertheless, the presence on a dedicated phishing blocklist and the detection by a security vendor suggest a non‑benign intent.

Defenders should add multitax.pk to internal deny‑list policies, monitor DNS queries for look‑ups to this FQDN, and ensure that any outbound traffic to the domain is blocked at the firewall or proxy level. Continuous re‑scanning with multi‑engine services is advised to capture any evolution of the site, and security teams should watch for related indicators such as newly observed sub‑domains or similar‑looking domains that may be part of the same campaign.