morooms[.]com

The domain morooms.com has been identified as a generic phishing threat, impersonating the MO ROOMS brand known for art-inspired living spaces. This fraudulent site was designed to deceive users into believing they were interacting with the legitimate MO ROOMS platform, potentially to harvest personal information or credentials. The threat type is generic phishing, with no specific drainer kit identified, but the risk remains elevated due to the sophistication of the impersonation.

Technical indicators reveal a VirusTotal score of 16 out of 95 security vendors flagging this domain as malicious, and it appears on one security blocklist. The domain was registered through Web Commerce Communications Limited dba WebNic.cc and resolves to IP address 27.254.86.122. Its SSL certificate is issued by Let's Encrypt (R12), and the domain was created on April 08, 2026. Notably, the domain is not listed on Google Safe Browsing, which may allow it to evade some automated filters.

Currently, the domain has been taken offline, indicating a successful response action. However, users should remain vigilant as similar domains may appear. PhishDestroy recommends verifying any MO ROOMS-related URLs through official channels and avoiding clicking on unsolicited links. No further risk is anticipated from this specific domain, but the broader threat of phishing campaigns targeting brand loyalists persists.