ontario[.]safedrivinggovaa[.]cc

The domain ontario.safedrivinggovaa.cc was registered through Gname.com Pte. Ltd. on June 12, 2026. It resolves to the IPv4 address 43.166.232.20, which is the sole hosting endpoint observed. VirusTotal has recorded 11 of 91 security vendors flagging the domain, indicating a moderate level of detection across multiple scanners.

The domain appears on one external blocklist and has been explicitly blocked by the PhishDestroy service, confirming that at least one threat‑intelligence feed considers it malicious. The campaign is classified as generic phishing with an elevated risk rating and remains active as of the report date, July 29, 2026. No additional public intelligence such as SSL certificate details, HTTP response codes, page titles, or Safe Browsing verdicts are currently available, leaving those aspects of the infrastructure unverified.

Defenders should consider the domain as hostile and enforce blocking at network perimeters and endpoint security solutions. Continuous monitoring of the IP address 43.166.232.20 for new associations, as well as periodic re‑scans on VirusTotal, are recommended to capture any changes in detection status. Inclusion of the domain in internal blocklists and feeding the indicator to threat‑sharing platforms will aid broader community protection.