fargopitan[.]com

fargopitan.com has been identified as a confirmed phishing site specifically targeting Mastercard customers. The domain, which is now offline, was created on May 16, 2025, and was designed to impersonate Mastercard's online banking and financial services, as indicated by its page title: "Home | Mobile Banking, Credit Cards, Mortgages, Auto Loan." This threat type, brand impersonation, poses a significant risk to individuals who may have been tricked into entering sensitive financial information.

Technical indicators from the investigation reveal that the domain was registered through Global Domain Group LLC and resolved to IP address 198.12.66.123. It was flagged by 3 out of 95 security vendors on VirusTotal, indicating that while not universally recognized as malicious, it was considered a threat by a subset of reputable security solutions. Additionally, fargopitan.com appeared on one security blocklist, and its SSL certificate was issued by Let's Encrypt (R12), a common certificate authority often abused by malicious sites. The domain's recent creation date and its impersonation of a major financial brand like Mastercard further elevate its risk profile.

As of the latest intelligence, fargopitan.com has been taken offline, which neutralizes the immediate threat from this specific domain. However, users who may have visited the site or provided any personal or financial information should take immediate action. It is strongly recommended to contact Mastercard's fraud department and monitor account statements for any unauthorized activity. Additionally, enabling two-factor authentication and changing passwords for any accounts that may have been compromised is advised. PhishDestroy continues to monitor for similar threats and urges users to verify the legitimacy of any financial website by directly typing the URL into the browser rather than clicking on links from unsolicited emails or messages.