makeupnikol[.]guru

PhishDestroy has identified makeupnikol.guru as a generic phishing domain, which was observed impersonating the YOYOPANEL brand. This domain was likely used to harvest login credentials through a fake sign-in page. The domain did not employ a known drainer kit, but its purpose was clearly malicious.

Technical indicators from the analysis show that the domain was flagged by 2 out of 95 security vendors on VirusTotal, indicating moderate but notable detection. The domain was registered through NiceNIC International Group Co., Limited and resolved to IP address 188.114.96.3. It was created on February 24, 2026, and its SSL certificate was issued by Google Trust Services / WE1. The domain appeared on 1 security blocklist and is not currently listed on Google Safe Browsing.

The current status of makeupnikol.guru is that it has been taken offline, which is a positive development for security. The appropriate response actions have been taken to mitigate the threat. However, users who may have interacted with the domain should remain vigilant, as the risk of credential theft persists if they entered any information. It is recommended that any credentials used on this site be changed immediately and monitored for suspicious activity.