detran[.]multasematraso[.]com

The domain detran.multasematraso.com was registered on June 13, 2026 through GoDaddy.com, LLC. Its authoritative nameservers are odin.ns.cloudflare.com and wally.ns.cloudflare.com, indicating that the domain is served behind Cloudflare’s CDN. DNS resolution returns the IPv4 address 172.67.137.12, which belongs to Cloudflare’s network. The domain appears on a single security blocklist and has been explicitly flagged by the PhishDestroy feed. VirusTotal analysis shows that eight of ninety‑one AV and URL‑reputation engines have raised a detection, confirming that a portion of the security community considers the host malicious. The overall detection ratio (8/91) suggests moderate consensus, but the limited number of detections may reflect the recent appearance of the domain.

Publicly available intelligence does not include a published page title, SSL certificate details, or HTTP response codes, so the content served at the URL remains unverified. Because SSL/TLS metadata such as certificate issuance date or fingerprint is not disclosed, automated trust‑score services cannot assign a confidence rating. Likewise, no attribution to a specific phishing kit or victim brand is recorded. The combination of recent registration, Cloudflare fronting, blocklist inclusion, and multi‑vendor detections aligns with patterns observed in generic phishing campaigns that exploit legitimate‑looking subdomains to lure victims.

Defenders should consider adding detran.multasematraso.com to outbound filtering rules and DNS blocklists. Continuous monitoring of the IP address 172.67.137.12 for additional malicious activity is advisable, as Cloudflare may host multiple abusive domains sharing the same address. Endpoint security solutions that integrate VirusTotal feed updates will benefit from the eight vendor detections already present. Until further content analysis is performed, the domain should be treated as high‑risk for credential harvesting.