A Magecart skimmer has been around for over a year but managed to keep a low profile. Lil Skim is a simple web skimmer that is fairly easy to identify and differs from other Magecart scripts. The threat actor is keen of impersonating internet companies but also the victim sites it goes after. The actor simply replaced the top level domain name with.site,.website or.pw to create hosts that load the skimmer code and receive stolen credit card data.”]
Source: https://blog.malwarebytes.com/threat-intelligence/2021/06/lil-skimmer-the-magecart-impersonator/