ww-brasilrodovias[.]click

PhishDestroy has identified ww-brasilrodovias.click as a generic phishing domain that impersonates the legitimate Brazilian toll payment service Pedagio Digital. The domain is currently offline, having been taken down after its malicious intent was confirmed. This campaign targeted users seeking to consult and pay traffic debts online, luring them to a fraudulent site designed to harvest sensitive financial information.

Technical analysis reveals that the domain was created on May 20, 2026, and registered through Key-Systems, LLC. It resolves to IP address 107.180.114.201 and was flagged by 17 out of 95 VirusTotal security vendors. Additionally, the domain appears on one security blocklist and was found in two AlienVault OTX threat intelligence pulses. The SSL certificate was issued by Let's Encrypt (R13), which is commonly abused by phishing sites due to its free and automated issuance process.

With a risk level of elevated and a strong presence in threat intelligence feeds, this phishing domain posed a credible threat to users of Pedagio Digital services. Although now offline, users who may have interacted with the site should monitor their financial accounts for unauthorized transactions. PhishDestroy recommends always verifying the authenticity of payment portals by checking official URLs and using trusted sources. If you have visited this domain, run a security scan and change any credentials entered on the fraudulent site immediately.