portal-pmsp[.]sbs

The domain portal-pmsp.sbs has been identified as a generic phishing threat. It appears to impersonate a legitimate brand, utilizing the page title "ZE Express | Bebidas geladas." This domain does not host any crypto drainer kit but is designed to collect sensitive user information by mimicking a trusted entity.

Technical indicators for portal-pmsp.sbs reveal a VirusTotal detection score of 5 out of 95 security vendors, indicating a notable level of concern among security assessments. The domain was registered through Dynadot Inc, and it resolves to the IP address 88.80.17.179. Importantly, the domain was created on June 26, 2026, indicating that it is relatively new and may be less likely to be recognized by individual users or organizations. It has been noted in one threat intelligence pulse by AlienVault OTX. Currently, this domain status is still active, with no indications of being on Google Safe Browsing (GSB) or being listed on common blocklists.

As of now, portal-pmsp.sbs remains active and poses an elevated risk to potential users who may encounter it. Security professionals should advise their users to avoid engaging with the site and potentially implement measures to block access. Continuous monitoring of this domain's status is recommended, as active phishing infrastructure can evolve rapidly. Organizations should ensure that end-users are educated about the risks of providing sensitive information on potentially fraudulent websites.