detran-sc-gov-sefaz[.]com

The domain detran-sc-gov-sefaz.com is currently flagged as a generic phishing site. Registry data shows the domain was registered through Dynadot Inc, and its authoritative name servers are lochlan.ns.cloudflare.com and melissa.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. A recent VirusTotal scan involving 91 antivirus and URL‑reputation engines returned no positive detections; however, the absence of alerts does not constitute evidence of benign behavior.

HTTP probing returned a 403 Forbidden response, suggesting that the web server is configured to deny direct access, a pattern sometimes observed in phishing infrastructure that serves content only to specific user agents or after certain redirects. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed, confirming that at least one external threat‑intelligence source has identified malicious activity associated with it. No additional public reputation scores, SSL certificate details, or page‑title information are presently available, leaving the content and exact phishing campaign tactics unverified.

Given the combination of a Cloudflare‑based hosting footprint, a registrar known for rapid domain issuance, and the presence on a phishing blocklist, defenders should treat the domain as high‑risk. Recommended mitigations include adding the domain to network and email filtering rules, monitoring DNS queries for related subdomains, and periodically re‑scanning the URL with sandbox or URL‑reputation services to capture any changes in payload or behavior.