m[.]uwqnfa[.]cc

This domain, m.uwqnfa.cc, is a confirmed brand impersonation site designed to deceive users into believing they are interacting with TikTok's official shopping platform. The site displays a page titled TikTok.Shop, using identical branding elements to trick visitors into entering login credentials, payment details, or other sensitive information. Such impersonation attacks typically aim to harvest user data for financial fraud, account takeovers, or unauthorized transactions on the victim's behalf. Analysis indicates the domain was registered on October 29, 2025, through Dynadot LLC, and currently resolves to the IP address 137.220.154.61, hosted in Hong Kong under AS4907 (BGPNET PTE. LTD.). The domain lacks an SSL certificate, increasing the risk of data interception during transmission. Security vendors have flagged this domain as malicious, with 17 out of 95 engines on VirusTotal detecting it as phishing. Additionally, it appears on two security blocklists and is explicitly labeled as phishing by Google Safe Browsing. If you or someone in your network visited m.uwqnfa.cc, immediate action is required. First, disconnect the affected device from the internet to prevent further data transmission. Run a full antivirus scan to detect and remove any malware that may have been installed. Change passwords for TikTok and any other accounts where the same credentials were used, prioritizing accounts linked to financial services. Monitor bank and credit card statements for unauthorized transactions, and consider enabling multi-factor authentication on all critical accounts. Report the incident to your organization's security team or a trusted cybersecurity professional for further investigation.