tivimatepremium[.]net

The domain tivimatepremium.net is an active phishing site engaged in brand impersonation, specifically targeting Amazon users. This domain is used for account takeover scams, attempting to trick visitors by impersonating Amazon and potentially capturing their credentials. The site is currently online and presents itself with a page titled 'TiviMate Premium APK v5.1.6 [MOD Account Unlocked] 2025'. Users searching for information about tivimatepremium.net, or questioning if it is safe or a scam, should be aware that it is flagged for phishing activities.

Technical analysis shows that tivimatepremium.net was registered on April 15, 2024, through Spaceship, Inc. The domain resolves to the IP address 159.253.120.251, which is located in Moldova (AS200019 ALEXHOST SRL). VirusTotal reports that 1 of 95 security vendors, including Seclookup, have flagged this domain. It appears on 1 security blocklist, specifically PhishDestroy. The domain does not have an SSL certificate and its nameservers are ns1.symbolhost.com and ns2.symbolhost.com. The HTTP status code for the site is 200, indicating it is accessible.

Individuals who may have entered their Amazon credentials or other sensitive information on tivimatepremium.net should immediately change their passwords and enable two-factor authentication on their Amazon account and any other accounts using the same credentials. Users should monitor their accounts for any unauthorized activity or signs of fraud. Suspected phishing domains like tivimatepremium.net can be reported to Amazon and relevant cybersecurity authorities to help prevent further incidents.