globeshopping04[.]tw

This domain is flagged as an elevated-risk brand impersonation threat specifically targeting backpack consumers through a fraudulent TikTok-Wholesale facade. Analysis indicates the infrastructure was designed to deceive users into believing they were accessing legitimate wholesale merchandise, while harvesting payment details and personal information under false pretenses. Infrastructure analysis reveals multiple high-confidence indicators of compromise. The domain globeshopping04.tw was registered on October 18, 2025, through Cloudmax Inc., and resolves to IP address 134.122.162.69, hosted within AS64050 (BGP Network Limited) in Taiwan. Security vendors on VirusTotal detected malicious activity with 14 out of 95 engines flagging the domain. The site appears on two security blocklists: PhishDestroy and PhishingDB. No SSL certificate was present, eliminating basic encryption protections, and the page title explicitly advertised TikTok-Wholesale, despite no affiliation with the legitimate platform. Mitigation requires immediate action from both consumers and security teams. Users who accessed the domain should invalidate any stored payment methods, reset account credentials, and monitor financial statements for unauthorized transactions. Network administrators should implement DNS sinkholing for 134.122.162.69 and blocklist the domain across web gateways and email filters. Brands targeted by such impersonation schemes should deploy monitoring for similar domain registrations using lookalike strings or keyword combinations, particularly those incorporating wholesale or discount terminology. Given the domain's current offline status, continuous monitoring is essential to detect potential re-emergence under altered infrastructure.