tax-en-lrs[.]ceylonicus[.]com

PhishDestroy has identified the domain tax-en-lrs.ceylonicus.com as a generic phishing threat. This domain does not impersonate any specific brand and does not appear to be associated with a known drainer kit. It was registered with the intent to deceive users into revealing sensitive information, though the exact lure is not specified.

Technical analysis reveals that this domain resolves to IP address 155.254.26.68 and was registered through NetEarth One Inc. d/b/a NetEarth on May 20, 2026. VirusTotal data shows that 8 out of 95 security vendors flag this domain as malicious. It appears on 1 security blocklist and has an SSL certificate issued by Let's Encrypt (R12). The page title displayed is "Apache2 Ubuntu Default Page: It works," which is a default server page, suggesting the site may have been set up but not fully developed or was quickly taken down. Google Safe Browsing status is not provided, but the domain is offline.

Currently, the domain is offline and has been taken down. The risk level was elevated, but with the domain offline, the immediate threat is mitigated. However, users who may have visited the site previously should monitor for signs of compromise, such as unusual account activity or phishing emails. PhishDestroy recommends that users avoid interacting with any content associated with this domain and ensure their security software is up to date. No further action is required at this time, but vigilance is advised.