What happened
Anti-phishing project PhishDestroy posted on Mastodon on 11 November 2026 that marc-jacobs[.]pl is a phishing detection. Its analysis page says that on 11 November the site showed a "Marc Jacobs Polska Outlet" storefront for clothing, shoes, bags and perfume with free delivery and returns over 200 zł. PhishDestroy's record says the domain was registered on 17 January 2026 and is hosted at 45.14.225.26 (SpectraIP); 19 of 92 VirusTotal engines flagged it, and it is also on the Phishing Army blocklist. Marc Jacobs is the brand being copied and is not involved. Buy Marc Jacobs products only from the brand's official site or known retailers, and be wary of 'Polska' or 'outlet' domains offering large discounts.
How the scam works
Fake online shops copy well-known brand names, product photos and discount banners, then take card or transfer payments for goods that never arrive, or that arrive as cheap substitutes. They are often advertised in social-media ads that talk about a closing-down sale, an outlet or a warehouse clearance, and they may share infrastructure with other look-alike shops flagged the same day. A familiar logo and a professional layout are not proof the store is genuine. Pay only on a site you already trust or that you opened from the brand's official app or a typed address, and be wary of across-the-board discounts that no real outlet is offering.
PhishDestroy flagged a cluster of Polish look-alike shops on 11 November 2026, including hollister-polska.pl, marc-jacobs.pl, onitsukastiger.pl and ricksowens.pl, which it listed on the shared IP 45.14.225.26, as well as guesspolska.pl, lowa-polska.com, norronapolska.com, lamaniahome-save.com, ezebra.click and a group of additional shops led by fishing-mart-pl.com. The real brands were impersonated and are not involved. The official eZebra shop is ezebra.pl, not ezebra.click.
Source
Public post on Mastodon, 11 November 2026: https://mastodon.social/@phishdestroy/117597795622384944
The indicators come from this source and have not been independently checked by scammers.com.
