depop[.]id5915[.]click

PhishDestroy has identified depop.id5915.click as an active brand impersonation scam targeting Depop users. This domain is currently under investigation but remains active, posing a significant risk to users who may interact with it under the false pretense of the legitimate Depop platform. The threat involves the fraudulent replication of Depop’s branding to deceive visitors into entering sensitive credentials or cryptocurrency wallet details, which are then harvested by the threat actors for financial gain or identity theft. This domain was flagged by 2 of 95 VirusTotal vendors as of the time of analysis, indicating that its malicious nature has yet to be widely recognized by automated detection systems. The domain was registered through Global Domain Group LLC, resolves to IP address 188.114.96.3, and was created on April 01, 2026. It utilizes a Let's Encrypt SSL certificate, which may further lend an air of legitimacy to unsuspecting users. The domain’s recent creation date and low detection rate highlight the stealthy and evolving nature of this threat, emphasizing the need for heightened vigilance among internet users. As this domain remains active and under investigation, PhishDestroy strongly advises users to avoid interacting with depop.id5915.click entirely. Verify the legitimacy of any Depop-related links or websites by cross-referencing with the official Depop domain (depop.com) and ensure all transactions and logins occur exclusively through verified, secure channels. Users who may have already entered sensitive information on this domain are urged to change their passwords immediately and monitor their financial accounts for any unauthorized activity. Security professionals and organizations should consider blocking this domain at the network level to prevent potential exposure within their environments.