ezpass[.]payues[.]cc

This domain, ezpass.payues.cc, is identified as a phishing site specifically designed to impersonate the E-ZPass electronic toll collection system. Analysis indicates the threat type as a fake login portal aimed at harvesting user credentials for toll accounts. The domain is currently offline, though prior activity and infrastructure suggest malicious intent. Infrastructure analysis reveals the domain was created on June 12, 2026, and registered through Gname.com Pte. Ltd. It resolves to the IP address 188.114.96.3 and is flagged by 13 of 95 security vendors on VirusTotal. The domain appears on one security blocklist and was actively blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy to unsuspecting users. The current offline status does not eliminate the risk, as the domain may resurface or be reactivated. Organizations and users are advised to block the domain and associated IP at the network level. Security teams should monitor for credential theft attempts linked to this infrastructure and educate users on recognizing phishing attempts targeting toll payment systems. If credentials were entered on this site, immediate password resets and account reviews are recommended.