grsuplementosonline[.]shop

This domain, grsuplementosonline.shop, poses a high-risk brand impersonation threat specifically targeting Celer, a recognized technology platform. The site masquerades as a TikTok Shop, likely designed to deceive users into believing they are interacting with an official or affiliated storefront. Such impersonation schemes typically aim to harvest credentials, distribute malware, or facilitate fraudulent transactions under the guise of a trusted brand. The inclusion of TikTok Shop branding increases the likelihood of social engineering success, particularly among users familiar with the platform’s e-commerce features.

Analysis of the domain’s infrastructure reveals multiple indicators of malicious activity. The domain is flagged by 20 out of 95 security vendors on VirusTotal, a significant detection rate that underscores its malicious nature. It was registered on November 21, 2025, through GoDaddy.com, LLC, a registrar frequently abused for short-lived phishing campaigns. The domain resolves to the IP address 181.41.201.162, hosted under AS212238 (Datacamp Limited) in Brazil, a network segment with a history of hosting fraudulent sites. Additionally, the domain appears on two security blocklists (PhishDestroy and PhishingDB) and is flagged by Google Safe Browsing for phishing. Notably, the site lacks an SSL certificate, a critical red flag for any domain handling user data.

Users who have visited grsuplementosonline.shop should take immediate action to mitigate potential risks. If any credentials, payment details, or personal information were entered, they should be considered compromised and changed immediately across all platforms where the same credentials were reused. Affected users should also monitor financial statements for unauthorized transactions and enable multi-factor authentication on critical accounts. Devices used to access the domain should be scanned for malware using updated security tools. Given the domain’s current offline status, users should remain vigilant for similar impersonation attempts, particularly those leveraging TikTok Shop or Celer branding, and verify domain authenticity through official channels before interacting with unfamiliar sites.