appdown[.]tiktokshop[.]cm

Analysis of the domain appdown.tiktokshop.cm indicates active brand impersonation targeting TikTok Shop, a high-risk threat as of July 12, 2026. The domain resolves to IP 192.64.113.228, hosted on AS22612 (Namecheap, Inc.) in the United States, and returns an HTTP 200 status with a page title matching 'TikTok Shop.' Infrastructure review shows the domain was registered on May 9, 2025, through Netcom.cm Sarl, utilizing nameservers a11.share-dns.com and b11.share-dns.net. Technologies detected include Nginx and HSTS, with a Let's Encrypt SSL certificate (R13). The domain appears on two security blocklists (PhishDestroy, PhishingDB) and is flagged by Google Safe Browsing for social engineering. VirusTotal reports 18 of 95 security vendors detecting malicious activity, though the exact nature of the payload remains unconfirmed. The scam type is classified as social media phishing, consistent with TikTok Shop impersonation. No evidence suggests compromise of legitimate TikTok infrastructure; this is a standalone fraudulent domain. Defenders should prioritize blocking the domain and its resolving IP at perimeter controls. Monitoring for related subdomains or newly registered domains under the same registrar (Netcom.cm Sarl) may aid in identifying further campaigns. Given the domain's persistence since mid-2025, assume continued operation unless sinkholed or seized.