flowpedagioltda[.]it[.]com

Analysis indicates that flowpedagioltda.it.com operated as a phishing domain targeting users of a digital toll payment system, as evidenced by the page title 'Pedágio Digital'. The domain was registered on February 26, 2026, and resolved to IP 84.32.84.0, hosted on AS47583 (Hostinger International Limited) in Lithuania. As of July 25, 2026, the site is offline, but prior activity was flagged by 12 of 93 security vendors on VirusTotal and appears on one security blocklist, including PhishDestroy.

The domain holds a Scamadviser trust score of 1/100 and a Gridinsoft trust score of 0/100, reinforcing its classification as malicious. The SSL certificate is identified as R13, a common indicator in low-reputation infrastructure. While the exact phishing kit or targeted brand beyond the page title is not confirmed, the combination of detection vendor flags, low trust scores, and hosting on a known bulletproof provider suggests deliberate abuse.

Defenders should treat this domain as compromised and block it at the DNS and proxy levels. Historical logs should be reviewed for connections to 84.32.84.0 or AS47583, particularly around the registration period. No evidence links this domain to broader campaigns, but monitoring for re-registration under similar naming patterns is recommended.