viascdetran[.]online

PhishDestroy identifies viascdetran.online as an active crypto drainer domain hosting a fraudulent replica of Brazil’s official DETRAN services to steal cryptocurrency and credentials. The domain was registered on April 20, 2026, through HOSTINGER operations, UAB and resolves to IP 2.57.91.18. It holds a valid Let’s Encrypt SSL certificate, which is commonly abused to lend false legitimacy to phishing sites. Security analysis via VirusTotal reveals only 1 out of 95 vendors currently detect this threat, indicating low visibility across threat intelligence platforms and highlighting the domain’s elevated risk to unsuspecting users seeking legitimate DETRAN services.

Technical indicators further corroborate the threat. The domain’s recent creation date—just days before this analysis—suggests a hastily deployed campaign targeting Portuguese-speaking users familiar with Brazil’s transit authority (DETRAN). The use of a shared hosting IP (2.57.91.18) across multiple suspicious domains increases the likelihood of coordinated malicious activity. Despite its fresh registration, the domain has already begun propagating through informal channels, including social media and messaging apps, exploiting users’ urgency to resolve traffic violations or vehicle registrations. No known blocklists currently include this domain, leaving it unfiltered by most web browsers or security tools.

Users must avoid interacting with viascdetran.online entirely. To mitigate risk, verify any suspected DETRAN-related website by visiting the official portal (detran..gov.br) directly or using PhishDestroy’s domain lookup tool. Enable browser extensions like uBlock Origin or Bitdefender TrafficLight to block known malicious domains. Never input personal, financial, or cryptocurrency wallet information into unfamiliar sites. Report this domain immediately to local cybercrime units or PhishDestroy to help disrupt the campaign. Exercise heightened caution with domains registered in 2026 and those using Let’s Encrypt certificates for government impersonations.