lis-skin[.]cc

PhishDestroy has flagged the domain liss-skin.cc as a suspected phishing site impersonating L'Oreal Paris cosmetics, targeting users searching for legitimate beauty products. This domain leverages spoofed branding to deceive visitors into purchasing counterfeit or non-existent skincare items, potentially harvesting payment details for fraudulent transactions. The site’s SSL certificate, issued by Let’s Encrypt, lends it an air of legitimacy, but its recent creation and suspicious infrastructure reveal its true intent. This domain was flagged with 0 detections out of 95 VirusTotal scans, indicating it has evaded initial detection systems. Registered through Spaceship, Inc. on December 29, 2025, the domain resolves to IP address 85.122.114.138—a hosting provider with a history of accommodating malicious activity. The sheer recency of its registration and the absence of any blocklist flags suggest this phishing campaign is still in its early stages, posing a heightened risk to unassuming consumers. If you or someone you know has visited liss-skin.cc, cease all interactions with the site immediately and avoid providing any personal or payment information. Run a full antivirus scan on your device to check for malware or unauthorized access. Report the domain to your browser’s phishing alert system or to PhishDestroy to help mitigate its spread. Stay vigilant and verify URLs before making online purchases to avoid falling victim to similar scams.