Counterfeit TikTok Shop domain drives 19% of Surfshark's global phishing blocks, still active ahead of Black Friday
A counterfeit TikTok Shop phishing site generated over 320,000 blocks between May and September 2026, about 19% of all global phishing domain blocks recorded by Surfshark's web content blocker. The domain was still active as of October and ranked as the most-blocked phishing domain for the first 20 days of the month (18% of blocks), raising concern ahead of the Black Friday shopping period. Surfshark's data shows monthly phishing blocks rising from 104,962 in April to 655,024 in September, a 524% increase, even as the number of protected devices grew. The report does not disclose the domain name.
Detalhes técnicos
- Data source: Surfshark web content blocker telemetry, April-September 2026, covering block requests categorized as phishing.
- Lure: impersonation of the TikTok Shop storefront to harvest personal data and payments.
- Specific domain, IOCs and attribution are not published.
Remediação
- Enter personal data only on the verified TikTok Shop.
- Watch for strange URLs, poor grammar and formatting errors.
- Check seller ratings, reviews and cancellation rates before ordering.
- Verify the payment recipient is a TikTok Shop seller.
- Do not click links that redirect outside TikTok Shop, and do not engage with buyers off-platform.
- TikTok Shop will never request sensitive information via third-party sites.
Linha do tempo
-
Counterfeit TikTok Shop domain drives 19% of Surfshark's global phishing blocks, still active ahead of Black Friday
ler a análise desta fonte ocultar
A counterfeit TikTok Shop phishing site generated over 320,000 blocks between May and September 2026, about 19% of all global phishing domain blocks recorded by Surfshark's web content blocker. The domain was still active as of October and ranked as the most-blocked phishing domain for the first 20 days of the month (18% of blocks), raising concern ahead of the Black Friday shopping period. Surfshark's data shows monthly phishing blocks rising from 104,962 in April to 655,024 in September, a 524% increase, even as the number of protected devices grew. The report does not disclose the domain name.
Technical Details
- Data source: Surfshark web content blocker telemetry, April-September 2026, covering block requests categorized as phishing.
- Lure: impersonation of the TikTok Shop storefront to harvest personal data and payments.
- Specific domain, IOCs and attribution are not published.
Remediation
- Enter personal data only on the verified TikTok Shop.
- Watch for strange URLs, poor grammar and formatting errors.
- Check seller ratings, reviews and cancellation rates before ordering.
- Verify the payment recipient is a TikTok Shop seller.
- Do not click links that redirect outside TikTok Shop, and do not engage with buyers off-platform.
- TikTok Shop will never request sensitive information via third-party sites.