glovotex[.]com

Analysis of glovotex.com indicates a high‑risk brand‑impersonation campaign targeting TikTok users. The domain was registered on November 12, 2025 through Tucows Domains Inc. and currently resolves to the IP address 23.227.38.73, which belongs to AS13335 Cloudflare, Inc. and is geolocated in California, US. The site returns an HTTP 403 status code and does not present an SSL certificate, exposing it to unencrypted traffic. Infrastructure details show the domain is served by Google Domains name servers (ns-cloud-c1.googledomains.com, ns-cloud-c2.googledomains.com, ns-cloud-c3.googledo). Threat intelligence records note the domain appears in 23 AlienVault OTX pulses and is listed on one public blocklist. It has been flagged by PhishDestroy and received a Gridinsoft trust score of 0 / 100, reinforcing the malicious assessment. VirusTotal reports a single detection out of 95 scanned security vendors, confirming at least one vendor identified malicious activity. The page title, "Glovotex - Premium Winter Gloves | Waterproof & Touchscreen Compatible," does not reference TikTok, suggesting the site may be used as a lure or redirect rather than a direct clone of the target brand. The classified scam type is "Social Media Phishing," consistent with attempts to harvest TikTok credentials. While the exact content of the landing page has not been captured, the combination of brand impersonation, active status, low trust score, and multiple intelligence sources warrants immediate mitigation. Defenders should add glovotex.com to DNS and URL filtering block lists, monitor for related traffic to the associated IP, and educate users about unsolicited TikTok‑related requests that reference unrelated product offers. Continuous tracking of any changes to the domain’s hosting or page content is recommended.