I don't think anyone should be particularly concerned about "criminal" actions conducted against a httpd/server host platform that's physically in Russia, opera

I don't think anyone should be particularly concerned about "criminal" actions conducted against a httpd/server host platform that's physically in Russia, operated by literal phishing criminals. What is the US going to do, extradite you to Russia for screwing with low-rent russian organized crime? As the other poster says, this is no more morally wrong than pulling a skimming device off an ATM.