poshmark[.]n34order[.]sbs

The phishing domain poshmark.n34order.sbs exploits the popularity of the Poshmark brand to deceive users. Although the site is currently offline, it has already been flagged as malicious by 4 out of 95 vendors on VirusTotal and is listed on one public blocklist, specifically PhishDestroy's. This highlights the domain's malicious intent and the potential threat it posed while active.

Registered through Web Commerce Communications Limited, the domain was hosted on an IP address associated with Cloudflare, Inc., located in the US. The lack of an SSL certificate suggests a lower level of sophistication, which is common in quickly deployed phishing sites. The domain was created on December 3, 2025, and PhishDestroy identified it the very next day, demonstrating the effectiveness of our early detection capabilities.

Despite the domain's current offline status, its brief period of activity underscores the importance of rapid response in the cybersecurity landscape. Phishing domains like poshmark.n34order.sbs often exploit the 24-72 hour gap before antivirus databases update their records. PhishDestroy's proactive monitoring and swift identification of such threats provide crucial protection during this vulnerable window, ensuring that potential victims are warned before significant harm can occur.