minibuschennai[.]com

This domain, minibuschennai.com, is actively flagged as a high-risk generic phishing site targeting travel booking services. Analysis indicates the domain was registered on January 27, 2016, through PDR Ltd. d/b/a PublicDomainRegistry.com and currently resolves to the IP address 103.21.59.27. The page title, 'JM - Travels,' suggests an attempt to impersonate a travel or transportation service, though the exact brand or entity being mimicked remains unconfirmed due to lack of further contextual evidence. The domain is listed on three security blocklists and is blocked by multiple threat intelligence platforms, including PhishDestroy, PhishingDB, and BLP-Malware. Infrastructure analysis reveals the use of common web technologies such as Bootstrap, Nginx, Apache HTTP Server, Cloudflare, OWL Carousel, Modernizr, Lightbox, and jQuery UI. The SSL certificate is issued by Let's Encrypt, a neutral indicator not inherently malicious but frequently leveraged by threat actors to lend superficial legitimacy. The domain has been flagged by 12 out of 95 security vendors on VirusTotal, and AlienVault OTX reports its presence in 50 threat intelligence pulses, further corroborating its malicious classification. The Gridinsoft trust score of 0/100 reinforces the high-risk assessment. What remains uncertain is the precise nature of the phishing campaign, including whether it targets payment details, personal information, or credentials. The page title and domain name imply a focus on travel-related fraud, but without direct access to the content, the exact mechanics of the scam cannot be determined. Defenders should treat this domain as malicious and prioritize blocking it at the network level. Monitoring for connections to the IP address 103.21.59.27 and associated domains may help identify compromised systems or further infrastructure linked to this campaign. Given its active status and consistent flagging across multiple sources, this domain poses a credible and ongoing threat.