clikckbus[.]com

This domain, clikckbus.com, has been identified as a source of a generic phishing campaign, posing a significant risk to users who may encounter it. The domain was created on April 28, 2026, and is currently offline, having been taken down due to its malicious activities. Analysis indicates that the domain was hosted on an IP address located in the United States, specifically on Google Cloud infrastructure (IP: 34.111.179.208). The domain is registered through Fewmoretaps OU d/b/a Trustname.com, a known registrar that has been associated with various malicious activities.

VirusTotal, a leading threat intelligence platform, has flagged clikckbus.com as malicious, with 13 out of 95 security vendors identifying it as a threat. The domain appears on one security blocklist, further substantiating its involvement in phishing activities. The SSL certificate used by the domain was issued by Let's Encrypt, a common choice for phishing sites due to its ease of acquisition. The domain was taken offline, which may indicate that the operators were either interrupted or voluntarily ceased operations.

Users who visited clikckbus.com are advised to check their systems for signs of compromise, including monitoring for unusual activity and ensuring that all security software is up-to-date. It is recommended to change passwords and enable two-factor authentication for any accounts that may have been accessed while visiting the site. Additionally, users should report any suspicious activity to their respective security teams or organizations.