securetransfer-ca[.]info

Analysis of securetransfer-ca.info indicates active credential phishing infrastructure as of the report date, July 29, 2026. The domain was registered on June 11, 2026 and has since been listed on three independent security blocklists. Defensive services PhishDestroy, MetaMask, and SEAL have all reported the domain as blocked, suggesting that multiple anti‑phishing layers have encountered malicious activity tied to this host.

VirusTotal scans show that four out of ninety‑one security vendors flag the domain, reinforcing the likelihood of malicious intent despite a relatively low detection count. The elevated risk rating reflects the combination of recent creation, blocklist presence, and vendor detections. No additional technical details such as hosting IP, SSL certificate status, or page title are available in the current intelligence set, leaving the exact delivery mechanisms and target brand unspecified.

Defenders should continue to deny any network traffic to securetransfer-ca.info, enforce URL filtering based on the observed blocklist entries, and monitor endpoint security solutions for the four vendor signatures identified by VirusTotal. Continuous re‑scanning of the domain is recommended to capture any changes in detection posture, and incident response teams should treat any credential submissions to this domain as compromised. Organizations employing credential‑based authentication should educate users about unsolicited requests for login details and verify URLs before entering sensitive information.