market[.]fun

This domain, market.fun, operates as a counterfeit e-commerce platform designed to harvest payment card details and login credentials from unsuspecting shoppers. Analysis indicates the site mimics legitimate retail interfaces, employing urgency tactics such as limited-time offers and fake customer reviews to manipulate visitors into entering sensitive financial information. The infrastructure is optimized for rapid deployment and evasion, with a focus on capturing transaction data before victims recognize the fraud. Infrastructure analysis reveals concrete indicators of malicious intent. The domain was registered on April 11, 2026, through NameCheap, Inc., a registrar frequently exploited for short-lived phishing campaigns. It resolves to the IP address 172.234.24.211, which has been associated with multiple fraudulent domains in recent threat intelligence reports. Security vendors have flagged market.fun as malicious, with 6 out of 95 engines on VirusTotal detecting it as a phishing threat. Additionally, the domain appears in one AlienVault OTX pulse and is blocked by at least one security blocklist, further corroborating its fraudulent nature. If you visited market.fun or entered any personal or payment information on the site, immediate action is required to mitigate risks. First, contact your financial institution to report potential fraud and request a card replacement if payment details were submitted. Monitor all accounts linked to the compromised information for unauthorized transactions and enable transaction alerts where available. Run a full antivirus scan on the device used to access the site to detect any malware or keyloggers that may have been installed. Finally, consider placing a fraud alert or credit freeze with major credit bureaus to prevent identity theft. Users should also report the domain to their local cybercrime unit or a recognized abuse reporting platform to aid in takedown efforts.