tk88mall[.]shop

This domain tk88mall.shop is assessed as a brand impersonation threat with elevated risk, specifically targeting apple branding while presenting a counterfeit “TikTok-Wholesale” storefront. The infrastructure is designed to mislead users into interacting with a fraudulent e-commerce or login interface, consistent with credential theft and impersonation-based fraud campaigns. No legitimate association with the impersonated brand is indicated.

Technical indicators show VirusTotal detection at 17/95 security vendors flagging the domain. The domain resolves to IP 103.177.76.56 hosted under AS140224 Nebula Global LLC in Singapore (SG). SSL certificate is issued under R13. The domain was created on February 21, 2026. It appears on 2 security blocklists, specifically PhishDestroy and PhishingDB, reinforcing malicious classification across independent threat feeds.

At the time of assessment, the domain is taken offline, reducing immediate exposure; however, historical infrastructure indicators suggest it was actively used for impersonation-based deception. Mitigation actions include blocking the resolved IP 103.177.76.56, enforcing domain-level filtering for tk88mall.shop, and monitoring for SSL reuse under R13 certificates. Given its impersonation of apple and prior blocklist presence, residual risk remains due to potential redeployment under similar hosting infrastructure or domain variants.