dtr-servicos-es-sefaz[.]site

dtr-servicos-es-sefaz.site is flagged as a domain involved in credential theft phishing activities. The domain attempts to impersonate legitimate service pages, often associated with government or financial institutions, to trick users into disclosing sensitive information such as usernames, passwords, and personal data. The primary objective of this domain is to harvest credentials that can be used for unauthorized access, identity theft, or further cyberattacks.

Analysis indicates that 15 out of 95 security vendors on VirusTotal have flagged this domain as malicious. The domain is registered through HOSTINGER operations, UAB, and was created on April 29, 2026. It resolves to the IP address 172.67.176.96 and is currently detected by one security blocklist, PhishDestroy. The use of Cloudflare and HTTP/3 technologies suggests that the attackers are leveraging advanced infrastructure to enhance the reliability and performance of the phishing site. The Gridinsoft trust score for this domain is 0/100, indicating a high level of suspicion and potential risk.

If users have visited dtr-servicos-es-sefaz.site, they should immediately change their passwords for any accounts they may have entered credentials into on the site. Additionally, users should run a full system scan using updated antivirus software to detect and remove any potential malware. Reporting the incident to the relevant security or IT department is also advised to ensure appropriate measures are taken to prevent further compromise.