marketplace[.]us[.]cc

This domain, marketplace.us.cc, was identified as a brand impersonation threat targeting TikTok Shop users. The site was designed to mimic the legitimate TikTok Shop platform, likely to harvest user credentials, payment details, or distribute malicious payloads under the guise of a trusted brand. Brand impersonation of this nature typically aims to exploit user trust, leading to account takeovers, financial fraud, or unauthorized transactions on compromised accounts. The domain's infrastructure and content were structured to closely resemble TikTok Shop's official interface, increasing the likelihood of successful deception among unsuspecting visitors. Analysis indicates that marketplace.us.cc was flagged by 18 out of 95 security vendors on VirusTotal, a significant detection rate that underscores its malicious intent. The domain was registered through Gname.com Pte. Ltd. on February 21, 2026, an unusually forward-dated creation that may indicate an attempt to evade detection or establish long-term fraudulent operations. It appears on one security blocklist, further confirming its classification as a threat. The domain resolved to the IP address 137.220.156.229, hosted in Hong Kong under AS4907 (BGPNET PTE. LTD.), a network segment frequently associated with high-risk activities. The SSL certificate was issued by Let's Encrypt, a common choice for threat actors due to its free and automated issuance process. Users who visited marketplace.us.cc should take immediate action to mitigate potential risks. First, avoid entering any credentials or personal information on the site, as it has been confirmed offline and is no longer accessible. If login details were submitted, reset passwords for TikTok Shop and any other accounts where the same credentials may have been reused. Monitor financial statements for unauthorized transactions and enable multi-factor authentication on all critical accounts. Additionally, scan the device used to access the domain for malware, as brand impersonation sites often distribute malicious software. Report the incident to the legitimate platform's security team to aid in broader threat mitigation efforts.