Beware of Fake Traffic Ticket Portals that Harvest Your PII and Credit Card Data

A phishing campaign targeting Canadian citizens uses SEO-poisoned search results, typosquatted and shortened URLs, and malicious ads to direct victims to convincing counterfeit provincial traffic-ticket payment portals. The fraud uses a phishing kit (with a deceptive “waiting room”), automated domain patterns, and over 70 malicious domains resolving to a single IP within the 45.156.87.0/24 subnet to harvest full PII and credit card data directly from victims.