What I don't like is it happens AFTER I put in my bank username and password!! More on reddit.com

I investigated a bit and it seems `zeronaught.com` is part of a service from F5 known as Device ID+ (see https://f5cloudservices.zendesk.com/hc/en-us/articles/360060301673-Getting-Started-with-F5-Device-ID-#h_01EW8BH6C9TRHE5RTEG4E29D8S ). F5 suggest reverse-proxying related requests to their server but it seems the CRA decided to link to their backend directly. So in short, it doesn't look compromised. However, I'd say the amount of external JavaScript loaded from external domains is concerning (hCaptcha, Device ID+, Adobe Dynamic Tag Manager) and posses a risk. But it's a risk the CRA has decided to take and isn't a vulnerability on its own. More on reddit.com

Hey folks! For newcomers or anyone filing taxes for the first time, there's no way to register on the CRA website right away. Here's how it works: You first need to file your taxes using any method you prefer; I personally used Wealthsimple. Once the CRA receives your documents and sends you a Notice of Assessment, you'll be able to register for a CRA account. Also, don’t forget to enable two-factor authentication (2FA) for added security! More on reddit.com

Try again in 24 hrs. Seems the system is overloaded today. It happens this time of year. More on reddit.com