PULSE NAME
Operation Road Trap: Fake toll and parking texts are spreading worldwide
WHITE PetrP.73 2026-04-30 Modified: 2026-04-30
37
IOCs
MEDIUM VOLUME
A recent smishing campaign, dubbed Operation Road Trap, targets drivers across twelve countries, employing fraudulent messages designed to pressure victims into submitting personal information or financial details. The scammers impersonate transport authorities, toll operators, and parking services, often claiming that the recipient has unpaid fines or tickets. The messages create a sense of urgency by threatening exacerbating consequences, such as fees or legal actions, and include links to websites that mimic legitimate payment portals.
Indicators of Compromise (37)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 014cda697a053d39f0504f626cb4aa4b 2026-04-30
FileHash-MD5 116b2280004a9d313a30acb767b1a85e 2026-04-30
FileHash-MD5 25604ed81bc7b603897e390c3c7920e0 2026-04-30
FileHash-MD5 3711004997a5efc09e3eefab8b2fa91f 2026-04-30
FileHash-MD5 3c45b541cb7f29bb60a83564850e775a 2026-04-30
FileHash-MD5 71bd06e73ad26ccf19cbc59c02630f14 2026-04-30
FileHash-MD5 a2b03b138ec0a6263b73e17372063345 2026-04-30
FileHash-MD5 bcc411c84a3ba169e1f989929115834f 2026-04-30
FileHash-MD5 ce83808d52dcfff0c6f96ee5874fd841 2026-04-30
FileHash-MD5 fdd449fc92ea92b8a5b5478b56c56ecd 2026-04-30
FileHash-SHA1 01e100d22a051ebb2627f25d362e86df4224fb62 SHA1 of 3711004997a5efc09e3eefab8b2fa91f 2026-04-30
FileHash-SHA1 226bf32d922ceaf04f65a979a41d1819d41e2eae SHA1 of a2b03b138ec0a6263b73e17372063345 2026-04-30
FileHash-SHA1 3100dc956e5e50e45775b5f8a3e07659e0bed6ee SHA1 of 3c45b541cb7f29bb60a83564850e775a 2026-04-30
FileHash-SHA1 deac48fd200cac93eb85fffbbcf8fb436c9fa178 SHA1 of 25604ed81bc7b603897e390c3c7920e0 2026-04-30
FileHash-SHA256 85a17820c84ad15209b506922714cc9f3cee8782a1cf6b293933a52d044983af SHA256 of 3c45b541cb7f29bb60a83564850e775a 2026-04-30
FileHash-SHA256 86f43f36d08f33136408b6f9a4139be43864cc166eaedb436f40ffd7c8820819 SHA256 of a2b03b138ec0a6263b73e17372063345 2026-04-30
FileHash-SHA256 9ef879b702878dcc1c95148bb21a3f3f951d4e223e46ec20f103c69bbba896a0 SHA256 of 25604ed81bc7b603897e390c3c7920e0 2026-04-30
FileHash-SHA256 b4694109e017aa6bf0604f8ef3e65d3cfe880f04e876da272a4226d5c7ab7d97 SHA256 of 3711004997a5efc09e3eefab8b2fa91f 2026-04-30
URL http://b2026.biltly.cc/ 2026-04-30
URL https://ca.gov-okqs.bond/portal 2026-04-30
URL https://lu-retrofacturation.com 2026-04-30
URL https://myparking-help.com 2026-04-30
URL https://polices-govt.link/nz 2026-04-30
URL https://seguridad-ahora.im/dgt.xn--php-9o0a 2026-04-30
domain bibtly.cc 2026-04-30
domain bitcutt.cc 2026-04-30
domain confira.online 2026-04-30
domain lu-retrofacturation.com 2026-04-30
domain mcsms.io 2026-04-30
domain myparking-help.com 2026-04-30
domain paylinkt.vip 2026-04-30
domain polices-govt.link 2026-04-30
domain seguridad-ahora.im 2026-04-30
hostname b2026.biltly.cc 2026-04-30
hostname ca.gov-okqs.bond 2026-04-30
hostname eflow.ie-paytoll.info 2026-04-30
hostname im.air-pay.uk 2026-04-30