linkfox-temu-order-global

SUSPICIOUS: the business purpose is coherent, but the data flow is not ideal because official Temu operations are proxied through LinkFox infrastructure that receives both LinkFox and Temu credentials. With no direct Temu endpoint use and limited public verification of gateway handling, this is a medium-high risk third-party credential and data forwarding pattern rather than confirmed malware.