dimoopoo[.]ru

PhishDestroy identifies dimoopoo.ru as a live credential phishing domain actively harvesting login credentials from unsuspecting users. Security telemetry confirms the domain is weaponized in real-time campaigns designed to trick victims into surrendering sensitive account information. Recent intelligence shows the domain was registered on March 24, 2026—well within the typical 90-day window for new phishing infrastructure—indicating this is a recently deployed attack vector rather than an aged threat. This domain was flagged by 17 of 95 participating VirusTotal security vendors, revealing elevated malicious intent beyond generic detection noise. It resolves to IP address 87.120.187.146 and was registered through R01-RU, a registrar known for minimal identity verification. The threat has already been blocked by two major blocklists: OpenPhish and PhishingArmy. Of particular concern, the domain holds a valid Let’s Encrypt SSL certificate, which enhances its credibility and increases the likelihood of user deception by presenting a false sense of security. If you visited dimoopoo.ru at any time, assume your credentials or personal data may have been compromised. Immediately change passwords for any accounts where you entered login details on this site. Run a full antivirus scan and monitor financial accounts for anomalies. Report any suspicious activity to your IT team or cybersecurity provider. Avoid interaction with the domain entirely to prevent further exposure.