tks-hoshoplive[.]com

The domain tks-hoshoplive.com poses a serious brand impersonation threat, specifically targeting the Celer brand. This means the site is designed to look like an official Celer platform to trick visitors into sharing sensitive information, such as login credentials or financial details. The site's page title was set to "Tiktok," which is a common tactic to evade initial detection, but its underlying purpose is to deceive users into believing they are interacting with Celer. Such impersonation sites are often used in phishing campaigns to steal data or distribute malware.

PhishDestroy's analysis reveals multiple red flags. The domain was registered on August 20, 2025, through Amazon Registrar, Inc., which is a legitimate registrar but often used by malicious actors due to its ease of access. VirusTotal reports that 16 out of 95 security vendors flag this domain as malicious, a strong indicator of its dangerous nature. The domain resolves to IP address 66.232.11.234 and appears on at least one security blocklist. Its SSL certificate is issued by DigiCert Inc., a well-known certificate authority, but this does not guarantee safety—many phishing sites now use valid certificates to appear legitimate. The site has since been taken offline, but similar threats may reappear under different domains.

If you have visited tks-hoshoplive.com, take immediate action. Change any passwords you may have entered on the site, especially for Celer or any associated accounts. Monitor your financial accounts for unauthorized transactions and enable two-factor authentication wherever possible. Run a full security scan on your device using reputable antivirus software. Be cautious of any unsolicited communications that reference Celer or TikTok, as they may be part of a broader phishing campaign. Always verify URLs carefully before entering personal information, and report any suspicious domains to security authorities.