us01pbx[.]zoomv[.]us

The domain us01pbx.zoomv.us is a confirmed generic phishing site posing an elevated risk of credential theft or malware distribution. No specific brand impersonation or drainer kit was identified. As of the latest verification, us01pbx.zoomv.us has been taken offline, though prior activity classified it as a phishing threat.

Technical indicators show limited but clear detection: 2 of 95 VirusTotal security vendors flagged us01pbx.zoomv.us, including Fortinet and SOCRadar. The domain appears on 3 security blocklists (PhishDestroy, MetaMask, and SEAL) and was registered through ABOVE.COM PTY LTD on February 8, 2021. It resolved to IP address 199.59.243.228, hosted on Amazon.com, Inc. infrastructure (AS16509) in the US, with an SSL certificate issued by Let's Encrypt (R13). Detected technologies include Google Cloud, Nginx, and Google Cloud CDN, while the observed page title was 'zoomv.us'. Google Safe Browsing did not flag the domain at the time of analysis.

Individuals who interacted with us01pbx.zoomv.us should immediately change any exposed credentials, enable multi-factor authentication on all accounts, and monitor for unauthorized access or fraudulent transactions. If financial or cryptocurrency data was entered, revoke any token approvals and consider transferring funds to a new wallet. Report the phishing domain to local cybersecurity authorities, the registrar (ABOVE.COM PTY LTD), and platforms like Google Safe Browsing or PhishTank to aid in broader mitigation efforts.