ontario[.]safedrivinggovbi[.]cc

The domain ontario.safedrivinggovbi.cc was registered on June 12, 2026 through Gname.com Pte. Ltd. and is currently listed as active with an elevated risk rating. It appears on a single security blocklist and is blocked by PhishDestroy. VirusTotal analysis shows that 13 of 91 security vendors have flagged the domain, indicating a moderate level of detection across the scanning ecosystem.

DNS resolution points to the IPv4 address 43.166.232.20, which can be used by defenders to create network‑level deny rules. No public information is available regarding SSL certificate details, HTTP response codes, or page content, and the page title has not been disclosed in the current intelligence set. The limited number of blocklist entries suggests that the infrastructure may be newly deployed or that the campaign is operating with a low profile.

Defenders should prioritize adding the domain and its resolving IP to existing URL filtering and firewall deny lists, monitor outbound traffic for connections to 43.166.232.20, and consider enforcing safe‑browsing checks that incorporate the VirusTotal detection count. Continuous re‑evaluation is advised, as additional detections or blocklist listings may emerge as the campaign progresses.