lis-skin[.]pro

This domain is flagged for hosting a credential harvesting phishing operation targeting users through deceptive login interfaces. Visitors may encounter fake authentication prompts designed to capture usernames, passwords, and other sensitive credentials, which are then transmitted to attacker-controlled infrastructure for unauthorized access or financial fraud. The site mimics legitimate services, increasing the likelihood of successful compromise for unsuspecting users. Analysis indicates the domain was registered on April 23, 2026, through NameCheap, Inc., and currently resolves to the IP address 85.122.114.138. Despite its recent creation, the domain has not yet been flagged by any of the 95 security vendors on VirusTotal, suggesting either evasion techniques or a lack of widespread detection. The SSL certificate is issued by Let's Encrypt, providing a false sense of security to visitors while the underlying content remains malicious. If you have visited lis-skin.pro or entered credentials on the site, immediate action is required. Disconnect the affected device from the network to prevent further data exfiltration. Reset all passwords associated with the compromised account, prioritizing email, financial, and administrative credentials. Enable multi-factor authentication where available to mitigate unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or transactions, and report any anomalies to the respective service providers. Additionally, scan the device for malware using updated security tools to detect potential secondary infections or persistence mechanisms.