zumubs[.]com

PhishDestroy identifies zumubs.com as an active phishing domain hosting a generic phishing kit, with no specific brand impersonation confirmed at this stage. The domain was registered on April 11, 2026, through Fewmoretaps OU (d/b/a Trustname.com) and resolves to IP 172.67.216.187. No drainer kit signatures or targeted spoofing have been identified, but the lack of detections (1/95 on VirusTotal) and the use of a Let's Encrypt SSL certificate suggest this may be a newly deployed or low-profile threat. zumubs.com exhibits multiple red flags consistent with phishing infrastructure. VirusTotal currently reports 1/95 detections, indicating it has evaded immediate scrutiny. The domain was registered on April 11, 2026, just days ago, and employs a legitimate SSL certificate via Let's Encrypt, likely to appear trustworthy to potential victims. Resolving to IP 172.67.216.187, it operates under Fewmoretaps OU (Trustname.com), a registrar with a mixed reputation for oversight laxity. At this time, no confirmed blocklist inclusions or Google Safe Browsing (GSB) flags are associated with the domain, leaving it unchecked on major threat intelligence platforms. The domain remains active and under investigation by PhishDestroy, with no immediate remediation actions reported by upstream providers. While the risk level is currently marked as under_investigation, the combination of a fresh registration, zero detections, and generic phishing behavior presents a latent threat to unsuspecting users. Security teams and end-users are advised to avoid interacting with zumubs.com and to report any observed activity to threat intelligence platforms. Remaining risk hinges on whether this domain escalates into a larger campaign or is taken down proactively by hosting providers or registrars.