What happened
Anti-phishing project PhishDestroy posted on Mastodon on 11 November 2026 that onitsukastiger[.]pl is a phishing detection. Its analysis page says that on 11 November the site showed an Onitsuka Tiger-branded Polish shoe store with men's, women's and children's sections and free delivery over 200 zł (captured in this layout since September). PhishDestroy's record says the domain was registered on 21 February 2026 and is hosted at 45.14.225.26 (SpectraIP); 16 of 92 VirusTotal engines flagged it, and it is also on the Phishing Army blocklist. Onitsuka Tiger is the brand being copied and is not involved. Buy Onitsuka Tiger products only from the brand's official site or known retailers, and be wary of 'Polska' or 'outlet' domains offering large discounts.
How the scam works
Fake online shops copy well-known brand names, product photos and discount banners, then take card or transfer payments for goods that never arrive, or that arrive as cheap substitutes. They are often advertised in social-media ads that talk about a closing-down sale, an outlet or a warehouse clearance, and they may share infrastructure with other look-alike shops flagged the same day. A familiar logo and a professional layout are not proof the store is genuine. Pay only on a site you already trust or that you opened from the brand's official app or a typed address, and be wary of across-the-board discounts that no real outlet is offering.
PhishDestroy flagged a cluster of Polish look-alike shops on 11 November 2026, including hollister-polska.pl, marc-jacobs.pl, onitsukastiger.pl and ricksowens.pl, which it listed on the shared IP 45.14.225.26, as well as guesspolska.pl, lowa-polska.com, norronapolska.com, lamaniahome-save.com, ezebra.click and a group of additional shops led by fishing-mart-pl.com. The real brands were impersonated and are not involved. The official eZebra shop is ezebra.pl, not ezebra.click.
Source
Public post on Mastodon, 11 November 2026: https://mastodon.social/@phishdestroy/117597831164585649
The indicators come from this source and have not been independently checked by scammers.com.
