portalveiculosdigital[.]com

The domain portalveiculosdigital.com has been identified as a generic phishing site impersonating Bacaxa-Lagos Serviços e Transportes LTDA, a purported vehicle consultancy and dispatch service. Analysis indicates this infrastructure is designed to deceive individuals seeking legitimate vehicle-related services, likely harvesting credentials or financial information under false pretenses. The domain currently holds an elevated risk classification due to its fraudulent operational context and detection history. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 172.67.131.252, which is part of a network range commonly utilized for content delivery and proxy services, potentially obscuring the true origin of the malicious activity. Detection metrics show the domain is flagged by 2 of 95 security vendors on VirusTotal, while appearing on one security blocklist. The SSL certificate, issued by Google Trust Services (WE1), provides a superficial layer of legitimacy but does not mitigate the underlying fraudulent intent. As of the latest assessment, portalveiculosdigital.com has been taken offline, reducing immediate exposure to potential victims. However, the domain's infrastructure remains a latent threat, as it could be reactivated or repurposed for future phishing campaigns. Organizations and individuals are advised to block the domain and its associated IP address at the network level. Users who may have interacted with this domain should monitor for unauthorized transactions, reset credentials for any accounts accessed during the exposure window, and report the incident to relevant fraud prevention authorities. Proactive threat intelligence monitoring is recommended to detect any resurgence of this campaign.