zoomgov[.]sbs

The domain zoomgov.sbs is an active generic phishing site posing an elevated risk. It does not impersonate a specific brand or deploy a known crypto drainer kit but is designed to harvest credentials or other sensitive information through deceptive means. As of the latest verification, zoomgov.sbs remains operational and has not been flagged by major security services like Google Safe Browsing, though it has drawn attention from a limited number of security vendors.

Technical indicators for zoomgov.sbs show 3 of 95 VirusTotal security vendors flagging the domain, including Gridinsoft, SOCRadar, and Webroot. The domain was registered through Dynadot LLC on December 25, 2025, and resolves to the IP address 172.67.191.102, hosted on Cloudflare's infrastructure (AS13335) in the US. It appears on one security blocklist, PhishDestroy, and uses an SSL certificate issued by Google Trust Services / WE1. The site returns an HTTP 403 status, and its nameservers are milan.ns.cloudflare.com and simone.ns.cloudflare.com. Detected technologies include Cloudflare, Cloudflare Browser Insights, and HTTP/3.

Users who may have interacted with zoomgov.sbs should immediately change any credentials entered on the site and enable two-factor authentication on affected accounts. Monitor accounts for unauthorized activity and report any fraudulent transactions. The domain can be reported to security vendors, hosting providers, and organizations like the Anti-Phishing Working Group (APWG) or local cybercrime units for further investigation.