pagamentos-freeflow.lovable.app
Catégorie : Phishing
Pour utiliser le produit avec toutes ses fonctionnalités, vous devez acheter une licence pour Combo Cleaner. Essai gratuit limité à sept jours. Combo Cleaner appartient à et est exploité par RCS LT, la société mère de PCRisk.com.
Description de pagamentos-freeflow.lovable.app
This website appears to present itself as a Portuguese-language digital toll-payment portal branded as "Pedágio Digital." Based on the page title, on-page text, and form fields, it claims to help users check and pay toll-related debts by entering a vehicle plate number and proceeding through an account or payment flow.
The domain is hosted on a lovable.app subdomain rather than on a dedicated brand-owned domain, which may indicate it was built using a hosted app platform. The visible page includes login and account-creation options, terms and privacy links, and branding elements, but the scan data provided does not identify a verified operator or clearly establish an official connection to a recognized toll-road authority or transportation company.
Évaluation de sécurité de pagamentos-freeflow.lovable.app
Multiple security engines flagged this URL at the time of the scan, with 15 out of 91 detections and most of those labels indicating phishing-related concerns. That level of multi-engine agreement is a meaningful warning sign, especially for a page that appears to request vehicle-related information and may lead users into a payment or account workflow. Although the malware file scan did not detect malicious files and several blacklist databases were clean at the time of review, phishing pages often rely on deceptive content rather than downloadable malware.
The page’s presentation as a toll-payment service on a third-party app-hosting subdomain may also increase caution, because financial or payment-related services are commonly expected to operate from clearly branded official domains. The combination of a payment-themed interface, lack of clear operator attribution, and broad phishing-related detections suggests the site may pose credential-harvesting or payment-fraud risks.
Based on these findings, this website may pose potential risks to visitors.
Description technique
The site was reachable over HTTPS with a valid TLS certificate issued by a mainstream certificate authority, and it appears to be served through Cloudflare infrastructure with hosting associated with Lovable APP. The certificate validity indicates encrypted transport was available at the time of the scan, but HTTPS alone does not verify that the service behind the page is trustworthy.
The domain is about three years old, uses Cloudflare nameservers, and DNSSEC appears to be unsigned. Malware scanning of the fetched files did not identify malicious payloads in the sampled assets, and no flagged external links or iframes were reported in the provided scan. However, the main technical concern here is not exploit delivery but the possibility of deceptive page content consistent with phishing activity.
Partagez votre expérience avec ce site web. Était-il sûr ? Avez-vous rencontré des problèmes ?