clickbusj[.]com

This domain is identified as a generic phishing infrastructure targeting users through fraudulent travel booking schemes. Analysis indicates clickbusj.com impersonates legitimate transportation or ticketing services to harvest sensitive information, including payment credentials and personal details. The site employs social engineering tactics to deceive visitors into entering data under false pretenses, such as fake bus ticket reservations or travel discounts. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on April 28, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with low-reputation registrations. It resolves to the IP address 34.111.179.208, hosted on Google Cloud infrastructure in the United States. Security vendors on VirusTotal flag the domain at a rate of 8 out of 95, and it appears on one security blocklist, specifically PhishDestroy. The SSL certificate is issued by Let's Encrypt (serial number E7), which, while common for legitimate sites, is also routinely exploited by phishing operators to lend false credibility. Users who visited clickbusj.com should take immediate action to mitigate potential compromise. If any credentials, payment information, or personal data were entered, affected individuals should revoke access to linked accounts, monitor for unauthorized transactions, and update passwords using strong, unique combinations. System scans using updated security tools are recommended to detect any secondary payloads or malware. Given the domain's current offline status, users should remain vigilant for similar phishing attempts, particularly those leveraging travel-related lures or urgency-based messaging.