lisskins[.]org

This domain, lisskins.org, poses as an official Counter-Strike 2 (CS2) skins marketplace, targeting users seeking to trade or sell in-game cosmetic items. Analysis indicates the site employs generic phishing tactics to harvest credentials, payment details, or other sensitive information under the pretense of secure transactions. The page title, displayed in Russian, translates to 'LIS-SKINS | Official CS2 Skins Market - The Best Way to Safely Sell Skins!', a clear attempt to mimic legitimate platforms and exploit user trust in branded marketplaces.

Infrastructure analysis reveals the domain was registered on March 23, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to IP address 172.67.190.246 and uses a Let's Encrypt SSL certificate, which, while providing encryption, does not validate the site's legitimacy. VirusTotal reports 2 out of 95 security vendors flagging the domain as malicious, and it appears on one security blocklist. The domain remains active despite being blocked by PhishDestroy, indicating ongoing risk to unsuspecting users.

Users who visited lisskins.org should immediately cease all interaction with the site. If credentials or payment details were entered, affected accounts must be secured by changing passwords, enabling multi-factor authentication, and monitoring for unauthorized transactions. Devices used to access the domain should undergo a full malware scan using updated security tools. Financial institutions should be notified if payment information was submitted. Given the domain's high-risk status and active phishing operations, users are advised to verify the legitimacy of any CS2-related marketplace through official channels before engaging in transactions.