b[.]91boris[.]com

This domain, b.91boris.com, is identified as a generic phishing site specifically designed to impersonate TikTok Wholesale services. Analysis indicates the page title explicitly displays 'TikTok Wholesale,' suggesting an attempt to deceive users into believing they are interacting with a legitimate bulk purchasing platform associated with the TikTok brand. Such phishing campaigns typically aim to harvest login credentials, payment details, or personal information under false pretenses, often leveraging brand recognition to lower user vigilance. The presence of this domain in active phishing operations aligns with broader trends of cybercriminals exploiting social media and e-commerce platforms to conduct fraudulent activities. Infrastructure analysis reveals multiple technical indicators supporting the malicious classification of b.91boris.com. The domain resolves to the IP address 188.114.96.3, hosted on AS13335 (Cloudflare, Inc.), a network frequently utilized for both legitimate and malicious purposes. It was registered through July Name Limited on March 14, 2026, an unusually recent creation date that may indicate a short-lived campaign. Security vendors on VirusTotal have flagged this domain in 18 out of 95 detection engines, while it appears on at least one security blocklist. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the risk, as phishing sites commonly employ valid certificates to appear more credible. Additionally, the domain has been proactively blocked by anti-phishing systems, further confirming its fraudulent nature. Users who have visited b.91boris.com or interacted with its content are advised to take immediate remedial actions. First, any credentials entered on the site should be considered compromised and must be changed across all platforms where identical or similar passwords were used. Multi-factor authentication should be enabled wherever possible to mitigate unauthorized access. Affected individuals should monitor financial statements for unauthorized transactions and report any suspicious activity to relevant financial institutions. System scans using updated security tools are recommended to detect potential malware or secondary infections. Finally, users should remain vigilant for follow-up phishing attempts via email, SMS, or other communication channels, as initial compromise often leads to further exploitation.