promovooshoje[.]com

PhishDestroy identifies promovooshoje.com as active generic phishing infrastructure engaged in impersonation of a well-known loyalty program. The domain is currently under investigation for actively soliciting credentials under false pretenses. No specific brand is confirmed at this stage; analysis remains ongoing due to the recent registration date. Promovooshoje.com resolves to IP 216.150.1.1 and is flagged by 0 of 95 VirusTotal vendors as of seed 72d046. The domain was registered on March 18, 2026 through Fewmoretaps OU d/b/a Trustname.com and secured with a Let’s Encrypt SSL certificate. It has not yet appeared on major threat intelligence blocklists and carries neutral trust scores due to its recent creation. Promovooshoje.com remains active and poses an immediate credential theft risk; users should block the domain at DNS and firewall levels, avoid any correspondence, and report the site to their email provider and relevant abuse channels. Monitoring will continue until the investigation concludes and the domain is either sinkholed or listed across threat feeds.