clickrpromos[.]com

The risk level for clickrpromos.com is high, and the domain is specifically flagged for credential theft. This assessment is based on multiple threat intelligence sources and the current status of the domain. Analysis indicates a significant threat to users who may interact with this domain, as it is designed to capture sensitive login information.

This domain is flagged as a phishing site by Google Safe Browsing and is listed in one AlienVault OTX threat intelligence pulse. VirusTotal reports that 14 out of 95 security vendors have identified this domain as malicious, further corroborating the threat. The domain is registered through Fewmoretaps OU d/b/a Trustname.com and resolves to the IP address 34.111.179.208. It was created on April 14, 2026, and currently appears on one security blocklist. The SSL certificate is issued by Let's Encrypt, which, while a reputable certificate authority, does not provide any assurance of the domain's legitimacy. The page title 'Viagem Certa - Passagens de Ônibus Online com os Melhores Preços' suggests that the domain may be impersonating a travel booking service to trick users into entering their credentials.

To mitigate the risks associated with credential theft, users should avoid visiting or interacting with clickrpromos.com. Security teams should ensure that the domain is blocked at the network level to prevent accidental access. Users should also be educated on the signs of phishing, such as suspicious URLs, unexpected emails, and requests for sensitive information. Multi-factor authentication should be enabled wherever possible to add an additional layer of security. Regularly monitoring and updating password managers and security software can help detect and prevent attacks. If credentials are suspected to have been compromised, they should be changed immediately, and the incident should be reported to the appropriate security authorities.