livetiktokshop[.]net

This domain is flagged as a high-risk generic_phishing threat targeting users through imitation of legitimate e-commerce platforms. Analysis indicates the site is designed to harvest credentials, payment details, or personal information under the guise of a TikTok-affiliated storefront. The infrastructure and registration patterns align with known phishing campaigns exploiting brand recognition to deceive victims. Infrastructure analysis reveals the domain livetiktokshop.net was registered on March 13, 2026, through Dominet (HK) Limited, a registrar frequently associated with malicious domains. It resolves to the IP address 104.195.31.35, hosted on AS22552 (eSited Solutions) in the United States. The domain is currently active and employs a Let's Encrypt SSL certificate (YR2), which provides a false sense of security to visitors. Detection metrics show 22 out of 95 security vendors on VirusTotal flagging the domain as malicious, while Google Safe Browsing and one additional blocklist (PhishDestroy) have also classified it as phishing. The page title mirrors the domain name, a common tactic to appear legitimate in search results and browser tabs. Mitigation against this specific threat type involves several technical and procedural controls. Organizations should implement domain-based blocking at the DNS or proxy level for livetiktokshop.net and its associated IP (104.195.31.35). Endpoint protection systems should be configured to detect and block access to newly registered domains (NRDs) with high-risk characteristics, particularly those mimicking popular brands. User awareness training should emphasize the risks of credential input on unverified e-commerce sites, even those with SSL certificates. Network monitoring should flag anomalous traffic to the IP or domain, especially from internal systems accessing it for the first time. Finally, security teams are advised to monitor for domains registered through Dominet (HK) Limited with similar naming conventions, as this registrar has been linked to multiple phishing campaigns.