tiktokshop101ng-sketch[.]github[.]io

PhishDestroy confirms tiktokshop101ng-sketch.github.io as an active phishing domain designed to mimic TikTok Shop, posing a high risk to unsuspecting users seeking legitimate e-commerce platforms. This site leverages social engineering tactics to harvest login credentials and payment details, tricking victims into entering sensitive information under false pretenses. This domain exhibits multiple red flags across reputable threat intelligence sources. Registered through GitHub, Inc., the site currently resolves to IP address 185.199.108.153 and operates with a valid Let's Encrypt SSL certificate. VirusTotal analysis confirms detection by 9 security vendors out of 95, while the domain appears on one known blocklist and is actively blocked by the OISD threat feed. Its classification as a generic phishing site underscores its malicious intent to deceive users through impersonation of a legitimate platform. Organizations and individuals should immediately block access to this domain at the network or endpoint level and advise users against interacting with it. For TikTok Shop users, enable two-factor authentication and verify all transactions through official channels. Consider deploying DNS filtering rules or endpoint protection measures to prevent access to this and similar phishing domains. If exposure has occurred, users should reset passwords, monitor accounts for fraudulent activity, and report the incident to relevant authorities.