duty-free[.]cc

PhishDestroy has identified duty-free.cc as a generic phishing domain with an elevated risk level. This domain was designed to mimic legitimate duty-free shopping portals, likely to harvest user credentials or payment information. Although currently offline, its past activity poses a threat to users who may have encountered it through phishing emails or malicious advertisements.

Analysis reveals that duty-free.cc was created on April 28, 2026, and registered through Internet Domain Service BS Corp. It resolves to IP address 186.2.165.90 and uses an SSL certificate issued by Let's Encrypt (R12). VirusTotal reports that 7 out of 95 security vendors flag this domain as malicious. Additionally, it appears on 3 security blocklists and is referenced in 1 threat intelligence pulse on AlienVault OTX. These indicators confirm the domain's association with phishing campaigns.

Users who have interacted with duty-free.cc should change passwords for any accounts entered on the site and monitor financial statements for unauthorized transactions. Organizations should block the domain at the network level and add its indicators (IP, SSL fingerprint) to threat detection systems. PhishDestroy recommends reporting any phishing emails referencing this domain to relevant authorities and educating users about verifying URLs before entering sensitive information.