Fraudsters operating on the AlphaBay darknet market have deployed a replica of the popular marketplace to steal login credentials from peers. The fake website mimics the login page of the Alphabay black market, including the CAPTCHA protection mechanism. When users login to the fake website they are redirected to the legitimate AlphaBay Market. The phishing attack makes use of a me.pn domain, which was likely chosen because addresses under this domain can be registered for free, and the me.pn string bears a (somewhat tenuous) similarity to the.onion TLD, at least in terms of its length.”]
Source: https://securityaffairs.co/wordpress/44439/cyber-crime/alphabay-phishing-campaign.html