clickbusd[.]com

The domain clickbusd.com has been identified as a generic phishing threat, now taken offline after raising multiple security alarms. While it does not impersonate a specific well-known brand, its behavior and infrastructure align with credential theft or data harvesting operations, making it a significant risk to any user who may have encountered it. The domain is currently inactive, but historical interactions could expose victims to compromise.

PhishDestroy's analysis reveals that clickbusd.com was flagged by 9 out of 95 VirusTotal security vendors, indicating broad consensus on its malicious nature. It was registered through Fewmoretaps OU d/b/a Trustname.com and resolved to IP address 34.111.179.208. The domain was created on April 28, 2026, and appears on 1 security blocklist. Additionally, it was found in 1 threat intelligence pulse on AlienVault OTX, confirming its inclusion in active threat tracking. The SSL certificate was issued by Let's Encrypt (serial E7), a common choice for phishing sites due to its free and automated issuance.

Given its elevated risk level and confirmed malicious status, clickbusd.com should be permanently blocked on all networks and systems. Any user who visited the site or entered credentials should change passwords immediately and monitor accounts for suspicious activity. Security teams should review logs for connections to the IP 34.111.179.208 and investigate any related phishing campaigns. Although the domain is offline, related domains or variations may appear, so continued vigilance is recommended.