# oooomoney.com — SUSPICIOUS

> PhishDestroy identifies oooomoney.com as a fake payment scam site posing as a financial service, flagged by only 2 of 95 security vendors.

## Summary
PhishDestroy has identified oooomoney.com as an active generic phishing domain posing as a financial service platform, currently marked with an elevated risk level by our threat intelligence systems.

This domain was flagged due to its association with generic phishing operations, with supporting evidence including a Let’s Encrypt SSL certificate, resolution to IP address 104.21.72.12, and registration through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 19, 2026. Security vendor VirusTotal reports a low detection rate of 2 out of 95, indicating minimal coverage across threat databases. The domain’s recent creation and low trust signals suggest it is likely deployed for short-term malicious campaigns targeting unsuspecting users seeking financial services.

Users are advised to avoid engaging with oooomoney.com and similar domains offering financial or payment services. Always verify website authenticity via official channels, check for HTTPS with valid certificates from recognized providers, and use trusted payment platforms. If exposed to this domain, scan devices for malware, reset passwords, and report suspicious activity to relevant authorities or your financial institution.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-19 22:18:34
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 104.21.72.12

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f36a8302-2693-4c9e-a08b-7a49d6898ee9
- PhishDestroy: https://phishdestroy.io/domain/oooomoney.com/
- LLM endpoint: https://phishdestroy.io/domain/oooomoney.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/oooomoney.com/
Last updated: 2026-03-23