zj[.]kvmzoe[.]com

This domain, zj.kvmzoe.com, is identified as a high-risk phishing site targeting users through social engineering tactics under the guise of NexaVerse, a brand associated with digital services. The page title, 'NexaVerse - Digital Excellence,' suggests an attempt to mimic legitimate digital platforms, likely to harvest credentials or distribute malicious payloads. No specific drainer kit signatures were confirmed, but the generic_phishing classification indicates broad impersonation rather than a specialized attack vector. Infrastructure analysis reveals the domain resolves to the IP address 103.83.194.148 and was registered through IONOS SE. The creation date of May 30, 2026, is anomalous, suggesting either a typo-squatting tactic or a placeholder for future malicious use. Google Safe Browsing flags this domain under the 'SOCIAL_ENGINEERING' category, and it appears on one security blocklist. VirusTotal reports 17 out of 95 security vendors detecting the domain as malicious, while Gridinsoft assigns a trust score of 0/100, further corroborating its high-risk status. As of the latest assessment, zj.kvmzoe.com has been taken offline, likely due to takedown actions or suspension by the registrar. Despite its current inactive status, residual risk remains for users who may have interacted with the domain prior to deactivation. Organizations are advised to monitor for related indicators of compromise, including the IP address and registrar details, and to implement proactive blocking of the domain in security controls to prevent potential re-emergence or similar threats from the same infrastructure.