clubebus[.]com

The domain clubebus.com has been assessed as a high-risk threat, specifically a generic phishing site masquerading as a legitimate bus ticket booking platform. This site, which posed as 'Viagem Certa - Passagens de Ônibus Online com os Melhores Preços', was designed to deceive users into entering sensitive information under the guise of purchasing affordable bus tickets. PhishDestroy warns that such sites often lead to credential theft or financial fraud.

According to intelligence gathered, clubebus.com was registered through Fewmoretaps OU d/b/a Trustname.com and created on April 13, 2026. The site resolved to IP address 34.111.179.208 and used an SSL certificate from Let's Encrypt (E8). Security vendors flagged it heavily: 12 out of 95 on VirusTotal marked it malicious, and it appeared on 1 security blocklist. Google Safe Browsing also flagged it for phishing, and it was found in 1 AlienVault OTX threat intelligence pulse. As of now, the site has been taken offline.

Users who may have interacted with clubebus.com should immediately change any passwords entered on the site and monitor financial accounts for unauthorized transactions. PhishDestroy recommends enabling two-factor authentication on all accounts and running a full antivirus scan on any device used to visit the site. If personal or payment information was submitted, contact your bank and credit bureaus to place fraud alerts. Always verify the legitimacy of travel booking sites by checking official registries and reading reviews before entering sensitive data.