# lis-skin.cc — SUSPICIOUS

> PhishDestroy identifies liss-skin.cc as a counterfeit L'Oreal Paris skincare phishing site with 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy has flagged the domain liss-skin.cc as a suspected phishing site impersonating L'Oreal Paris cosmetics, targeting users searching for legitimate beauty products. This domain leverages spoofed branding to deceive visitors into purchasing counterfeit or non-existent skincare items, potentially harvesting payment details for fraudulent transactions. The site’s SSL certificate, issued by Let’s Encrypt, lends it an air of legitimacy, but its recent creation and suspicious infrastructure reveal its true intent.  This domain was flagged with 0 detections out of 95 VirusTotal scans, indicating it has evaded initial detection systems. Registered through Spaceship, Inc. on December 29, 2025, the domain resolves to IP address 85.122.114.138—a hosting provider with a history of accommodating malicious activity. The sheer recency of its registration and the absence of any blocklist flags suggest this phishing campaign is still in its early stages, posing a heightened risk to unassuming consumers.  If you or someone you know has visited liss-skin.cc, cease all interactions with the site immediately and avoid providing any personal or payment information. Run a full antivirus scan on your device to check for malware or unauthorized access. Report the domain to your browser’s phishing alert system or to PhishDestroy to help mitigate its spread. Stay vigilant and verify URLs before making online purchases to avoid falling victim to similar scams.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-12-29 19:13:45
- Registrar: Spaceship, Inc.
- IP: 85.122.114.138

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6e31ff61-d89f-404b-8e0a-613864b762c8
- PhishDestroy: https://phishdestroy.io/domain/lis-skin.cc/
- LLM endpoint: https://phishdestroy.io/domain/lis-skin.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/lis-skin.cc/
Last updated: 2026-04-14