poshmark-shop[.]shop

This domain, poshmark-shop.shop, poses a high-risk credential theft threat by impersonating the legitimate Poshmark marketplace. Visitors to the site are presented with fraudulent login pages designed to harvest usernames, passwords, and potentially payment details. The site exploits trust in the Poshmark brand to trick users into entering sensitive information, which can then be used for account takeovers, unauthorized purchases, or further targeted attacks. Analysis indicates this domain was registered through Dynadot Inc. and was hosted on infrastructure associated with Cloudflare, Inc. (AS1335, IP 188.114.96.3). At the time of assessment, the domain resolved to an error page, though this may reflect a temporary takedown or evasion tactic. Security vendors flagged the domain as malicious, with 18 out of 95 engines on VirusTotal detecting it as a phishing threat. Additionally, the domain appears on one security blocklist and is explicitly labeled as phishing by Google Safe Browsing. Notably, the absence of an SSL certificate further undermines its legitimacy, as modern secure sites universally employ encryption. Users who visited poshmark-shop.shop should assume their credentials or other sensitive data were compromised. Immediate steps include changing passwords for Poshmark and any other accounts where the same credentials were reused. Enable multi-factor authentication (MFA) on all critical accounts to mitigate unauthorized access. Monitor financial statements and account activity for signs of fraudulent transactions. If payment details were entered, contact the relevant financial institution to report potential fraud. Finally, scan the device used to visit the site for malware, as phishing pages may deploy malicious scripts or redirect to exploit kits.