ldy[.]atsshoptess[.]com

This domain, ldy.atsshoptess.com, is identified as a high-risk phishing infrastructure designed to impersonate Facebook login portals. Analysis indicates the page title displayed as 'TikTok shop,' a likely tactic to mislead users into entering credentials under the guise of a legitimate service. The domain operates without SSL encryption, increasing exposure to man-in-the-middle attacks and credential interception. Given its explicit targeting of Facebook users, this infrastructure poses a direct threat to personal and corporate accounts, potentially leading to unauthorized access, data exfiltration, or further malicious activity such as account takeovers or social engineering campaigns. Infrastructure analysis reveals multiple technical indicators supporting its malicious classification. The domain resolves to IP address 45.194.36.229, hosted under AS138995 (Antbox Networks Limited) in Hong Kong, a jurisdiction frequently associated with phishing operations. It was registered through Global Domain Group LLC on November 22, 2025, and is currently offline, though historical activity remains a concern. Security vendors flagged the domain on 17 out of 95 engines in VirusTotal, while two independent security blocklists (PhishDestroy and PhishingDB) have listed it. Google Safe Browsing also categorizes the domain as phishing, reinforcing its malicious intent. Users who visited ldy.atsshoptess.com or entered credentials on the site should take immediate remedial action. Reset passwords for any accounts accessed from the domain, particularly Facebook, using a unique, complex password. Enable multi-factor authentication where available to mitigate unauthorized access. Review account activity for signs of compromise, such as unfamiliar logins or unauthorized transactions. If financial or sensitive data was entered, monitor linked accounts for fraudulent activity. Organizations should consider revoking session tokens associated with the affected accounts and conducting a security audit to assess potential lateral movement or data exposure.