What happened
Anti-phishing project PhishDestroy posted on Mastodon on 11 November 2026 a run of phishing detections for Polish-language online shops, all of which are also on the Phishing Army blocklist and flagged by 13 to 16 VirusTotal engines. PhishDestroy's records describe fishing-mart-pl[.]com (fishing tackle, registered Nov 2025), motcz24pl[.]com (motorcycle parts, Jul 2026), przemoferta[.]com (industrial parts and tools, Jul 2026), fieldmora[.]com (tractor and combine parts, May 2026), rtvczesci[.]com (home appliances, Jul 2026) and domswiatlobud[.]com (furniture and lighting, Jul 2026). Several use the same "SKLEP ONLINE" / "ZOBACZ OFERTĘ" layout. Before paying a new shop, check its company registration (NIP/KRS), reviews and domain age, and pay by card or a method with buyer protection.
How the scam works
Fake online shops copy well-known brand names, product photos and discount banners, then take card or transfer payments for goods that never arrive, or that arrive as cheap substitutes. They are often advertised in social-media ads that talk about a closing-down sale, an outlet or a warehouse clearance, and they may share infrastructure with other look-alike shops flagged the same day. A familiar logo and a professional layout are not proof the store is genuine. Pay only on a site you already trust or that you opened from the brand's official app or a typed address, and be wary of across-the-board discounts that no real outlet is offering.
PhishDestroy flagged a cluster of Polish look-alike shops on 11 November 2026, including hollister-polska.pl, marc-jacobs.pl, onitsukastiger.pl and ricksowens.pl, which it listed on the shared IP 45.14.225.26, as well as guesspolska.pl, lowa-polska.com, norronapolska.com, lamaniahome-save.com, ezebra.click and a group of additional shops led by fishing-mart-pl.com. The real brands were impersonated and are not involved. The official eZebra shop is ezebra.pl, not ezebra.click.
Source
Public post on Mastodon, 11 November 2026: https://mastodon.social/@phishdestroy/117596902789496443
The indicators come from this source and have not been independently checked by scammers.com.