oldschool[.]markets

The domain oldschool.markets was a generic phishing site that posed an elevated risk of credential theft or financial fraud. It did not impersonate a specific brand or deploy a known crypto drainer kit. As of the latest verification, oldschool.markets has been taken offline, though its prior activity remains a concern for users who may have interacted with it.

Technical indicators confirm the domain's malicious intent. oldschool.markets was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and SOCRadar, and appeared on 1 security blocklist (PhishDestroy). It was registered through NiceNIC International Group Co., Limited on February 22, 2026, and resolved to the IP address 188.114.97.3, hosted on Cloudflare's network (AS13335). The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Информация о маркете | OldSchoolMarket'. Technologies detected included Tailwind CSS, Yandex.Metrika, and Cloudflare services, with an HTTP status of 405 recorded before takedown.

Users who visited oldschool.markets should assume their credentials or personal information may have been compromised. Change passwords for any accounts accessed during the exposure period, enable two-factor authentication, and monitor accounts for unauthorized activity. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader mitigation efforts. If financial data was entered, contact the relevant institution immediately to secure accounts.