seguro-tranive[.]com

This domain, seguro-tranive.com, is flagged as a high-risk phishing site impersonating Seguro Tranive, a service targeting users in Puerto Rico. Registered on February 21, 2026, through NETIM SAS, the domain remains active as of July 12, 2026, resolving to IP address 94.26.38.18 (AS202412, Omegatech LTD, Bulgaria). Infrastructure analysis reveals the use of Nginx and OpenResty web server technologies, with nameservers hosted under netim.net and MX records pointing to mx1.netim.net and mx2.netim.net, suggesting potential email-based attack vectors. The page title, 'Seguro Tranive | Página web oficial Puerto Rico 2026,' explicitly indicates an attempt to mimic an official Seguro Tranive website. The domain is blocked by at least one security vendor (PhishDestroy) and appears on one security blocklist. Gridinsoft assigns a trust score of 0/100, reinforcing its malicious classification. While six out of 93 security vendors on VirusTotal flag the domain, this detection rate alone does not confirm the full scope of its threat activity. Defenders should treat this domain as actively malicious, particularly for campaigns targeting Spanish-speaking users in Puerto Rico. Recommended actions include blocking the domain and its resolving IP at network perimeters, monitoring for related email traffic (via the identified MX records), and investigating potential credential harvesting or malware distribution tied to this infrastructure. The exact phishing mechanics remain unconfirmed, but the domain’s branding and registration timeline align with recent impersonation trends.