# lis-skmis.com — SUSPICIOUS

> lis-skmis.com has been flagged for potential phishing. Avoid interacting with this domain and ensure your credentials remain secure.

## Summary
PhishDestroy has identified lis-skmis.com as a suspected phishing domain targeting unsuspecting users. The domain was created recently on March 27, 2025, and was associated with deceptive practices aimed at capturing sensitive user information. Although the overall risk level is low, users should remain cautious given its phishing classification.

Technical analysis reveals that lis-skmis.com resolved to the IP address 172.67.166.54 and was registered through NiceNIC International Group Co., Limited. The domain appeared on one security blocklist and was flagged by 1 out of 95 security vendors on VirusTotal. The page title encountered during investigation indicated a Cloudflare warning labeling the site as a suspected phishing site, suggesting protective measures were in place.

Currently, the domain is offline and no longer accessible, mitigating immediate risk. PhishDestroy recommends that users avoid visiting lis-skmis.com and ensure that any credentials potentially exposed are changed promptly. Organizations should continue monitoring related domains for similar activity and maintain updated endpoint protection to guard against linked phishing attempts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2025-03-27 15:21:51
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.166.54
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: apollo.ns.cloudflare.com wren.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["Fortinet"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cd944-4fac-73a2-8b08-f164ed3c059e.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/79ea0450-10f2-4b48-8832-91b5c86d469f
- PhishDestroy: https://phishdestroy.io/domain/lis-skmis.com/
- LLM endpoint: https://phishdestroy.io/domain/lis-skmis.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/lis-skmis.com/
Last updated: 2026-03-19