rodiviasdigitalpedagiobrasil[.]com

This domain is flagged for hosting a fake toll payment phishing scheme targeting Brazilian users. Analysis indicates the site impersonates legitimate digital toll collection services under the guise of 'Pedágio Digital,' a tactic designed to harvest financial credentials and personal payment data. The threat type is classified as brand impersonation with financial fraud intent, posing elevated risk due to direct targeting of payment systems. Infrastructure analysis reveals the domain was registered on February 26, 2026, through GoDaddy.com, LLC, and resolves to IP address 80.71.224.51, hosted in the Netherlands under AS209274 (Kraken Network ISP LTD). No SSL certificate is present, increasing vulnerability to man-in-the-middle interception. The domain appears on one security blocklist and is flagged by 18 of 95 security vendors on VirusTotal. The page title 'Pedágio Digital' matches known phishing templates used in prior toll-related fraud campaigns. Mitigation requires immediate blocking of the domain and associated IP across all network security layers. Organizations should monitor for credential submissions to unencrypted forms under the 'Pedágio Digital' branding and alert users to verify digital toll payment portals via official government domains only. Payment processors should flag transactions originating from this domain or IP for fraud review. Given the domain's current offline status, continuous monitoring for reactivation or domain resurgence under similar naming conventions is recommended.