clickbusk[.]com

Analysis indicates that the domain clickbusk.com is currently active and has been identified as part of a generic phishing campaign. The domain resolves to the IP address 75.2.60.5 and is hosted behind Cloudflare's infrastructure, as evidenced by the authoritative nameservers fish.ns.cloudflare.com and scott.ns.cloudflare.com. Registration data shows the domain was created on March 02, 2026 and was provisioned through Cloudflare, Inc., which is consistent with the use of Cloudflare's DNS services for rapid deployment.

Google Safe Browsing has classified the domain as a social engineering threat, and the PhishDestroy blocklist has already taken action to block the domain. Additionally, the domain appears on one external security blocklist, and fifteen of ninety‑five VirusTotal scanners have flagged it as malicious, reinforcing the suspicion of malicious intent. The overall risk rating has been assigned as high, reflecting the combination of active hosting, detection by multiple vendors, and confirmed blocklist entries.

While the available intelligence confirms the domain’s association with phishing, details such as the specific landing page content, SSL certificate attributes, or HTTP response codes have not been disclosed, leaving the full scope of the exploit unknown. Defenders should proactively block clickbusk.com at network perimeter devices, update URL filtering policies, and monitor for any outbound connections to the associated IP address 75.2.60.5. Continuous re‑evaluation is advised, as additional indicators may emerge from subsequent scans or threat‑intel feeds.