# tojuheo.com: Home Office and Cozy Living Tips Blog Homepage | PhishDestroy
Content language: English
Canonical HTML report: https://phishdestroy.io/domain/tojuheo.com/
Machine-readable companion: https://phishdestroy.io/domain/tojuheo.com/llm.txt
## Summary
PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.
## Stored observations
- Listed by PhishDestroy: yes
- Availability at last stored check: Last known active
- First observed by PhishDestroy: 2026-11-04 19:48:27 UTC
- Selected availability observation: 2026-11-05T00:10:57Z
- Stored record updated: 2026-11-05 00:10:57 UTC
- VirusTotal detections in the stored snapshot: 15/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean
## Stored infrastructure
- Observed IP address: 188.114.97.1
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 308 (observed: 2026-11-05T00:10:57Z)
- Registration date in stored WHOIS data: 2026-06-16 06:18:01 UTC
## Evidence links
- URLScan report: https://urlscan.io/result/019f5765-a952-7391-aee0-ac984b391ea0/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/tojuheo.com
- Certificate Transparency search: https://crt.sh/?q=%25.tojuheo.com
- Web Archive lookup: https://web.archive.org/web/*/https://tojuheo.com/
## Corrections
- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq
## Public report package
PhishDestroy records tojuheo.com as a blog homepage presenting articles on home office setups, cozy reading nooks, and workspace organization tips.
On 2026-07-12, tojuheo.com displayed a blog homepage branded "TOJUHEO Move Strong" with a navigation bar offering Disclaimer, Home, Privacy Policy, Terms and Conditions, and Write Us links. The page features a popular tags section listing topics such as home office, workspace design, cozy office, productivity, and home decor, alongside a scrolling ticker of exclusive article headlines. Below the header, the layout presents numbered article rankings, a featured post titled "Tips for Creating a Cozy and Inviting Reading Nook at Home" with a bookshelf image, and a Latest/Popular/Trending sidebar listing similar workspace and budget tips articles. A cookie consent banner appears at the bottom with an Accept button.
The stored VirusTotal domain result reports 15 detections out of 92 engines. DNS8 reported "suspicious"; ESET reported "suspicious".
Package revision: 43934a29c2a4dd9beb29f2d4d243ee1a38ec3abce75c5590fcc901fd0907b795
Text generated (not scan time): 2026-11-04 21:12:37
Reviewed evidence snapshot: {"domain":"tojuheo.com","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"tojuheo.com","final_host":"tojuheo.com","redirects":[],"captured_at":"2026-07-12T17:35:15.141000Z","uuid":"019f5765-a952-7391-aee0-ac984b391ea0","report_url":"https://urlscan.io/result/019f5765-a952-7391-aee0-ac984b391ea0/","sha256":"0dd9d7f66b67135eb5bd440f0d154ef325b446da7deb2749ccb11110cb2c3022","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","virustotal":{"scope":"domain","detections":15,"engines":92,"malicious":12,"suspicious":3,"analysis_date":"2026-11-02","retrieved_date":"2026-11-04","vendor_labels":{"DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"flagging_vendors":["DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","Webroot","Fortinet","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"]},"virustotal_public_summary":"The stored VirusTotal domain result reports 15 detections out of 92 engines. DNS8 reported \"suspicious\"; ESET reported \"suspicious\".","page_paragraph_target_characters":546}
Source facts (timestamps as stored): {"record_id":1793567,"first_recorded_at":"2026-11-04 20:48:27","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":15,"denominator":92,"malicious":12,"suspicious":3,"vendors":{"DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-11-02T16:52:06Z","checked_at":null,"fetched_at":"2026-11-04T20:07:17Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":15,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Kaspersky","Lionic","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":"2026-11-02 16:52:06","checked_at":"2026-11-04 21:07:25","fetched_at":"2026-11-04 20:07:26","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"DNS8":"suspicious","ESET":"suspicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Kaspersky":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"vendor_names":["DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","Webroot","Fortinet","SOCRadar","Kaspersky","Seclookup","Gridinsoft","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":46,"malicious":12,"suspicious":3,"undetected":31}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-04 21:07:37"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-05 00:30:42"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1793567,"scope":"checked_url","observed_at":"2026-11-05T00:10:57Z","http_status":308,"http_observed_at":"2026-11-05T00:10:57Z","stored_http_code":308,"stored_http_observed_at":"2026-11-05T00:10:57Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}}
## Stored page captures
- URLScan · 2026-07-12: https://screenshots.phishdestroy.io/us/019f5765-a952-7391-aee0-ac984b391ea0.png
Captured: 2026-07-12 17:35:15 UTC
Source report: https://urlscan.io/result/019f5765-a952-7391-aee0-ac984b391ea0/
SHA-256: 0dd9d7f66b67135eb5bd440f0d154ef325b446da7deb2749ccb11110cb2c3022
- URLScan · 2026-06-24: https://screenshots.phishdestroy.io/us/019ef709-66a9-73db-b661-22bb6a65d4ef.png
Captured: 2026-06-24 00:30:57 UTC
Source report: https://urlscan.io/result/019ef709-66a9-73db-b661-22bb6a65d4ef/
SHA-256: 7a2c3fa06907e3b6a779c197050af3ff8fc8774749bd8b7203cab400333f06be
- URLScan · 2026-06-24: https://screenshots.phishdestroy.io/us/019ef8dd-e3ef-73b9-96d0-a67d081436d7.png
Captured: 2026-06-24 09:02:45 UTC
Source report: https://urlscan.io/result/019ef8dd-e3ef-73b9-96d0-a67d081436d7/
SHA-256: 8a1096a3b6c6a4226f988b9e5a20d7899b649af0a68ef6512f553c6a38ef6d12
- URLScan · 2026-06-25: https://screenshots.phishdestroy.io/us/019efe04-bf38-725a-8b43-9bf50ccafff9.png
Captured: 2026-06-25 09:03:18 UTC
Source report: https://urlscan.io/result/019efe04-bf38-725a-8b43-9bf50ccafff9/
SHA-256: 1b0b050d41ceee7c94f50fba6763bfc4c86f7032365c269e18f6ea8efe0bf780
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/e97f30b3-8c82-41b3-9052-dd59f1731ca9.png
Captured: 2026-11-04 20:08:57 UTC
Source report: https://radar.cloudflare.com/scan/e97f30b3-8c82-41b3-9052-dd59f1731ca9
SHA-256: f4496378add809be161895bc3e5a2bd46e0a74b74d72dda33dc8465f6467d801
## Collected source observations
Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
"urlscan": {
"v": 1,
"fetched_at": "2026-11-04T20:07:41Z",
"uuid": "019f5765-a952-7391-aee0-ac984b391ea0",
"scanned_at": "2026-07-12T17:35:15Z",
"final_url": "https://tojuheo.com/",
"status": 200,
"ip": "188.114.96.3",
"domains": [
"fonts.gstatic.com",
"fonts.googleapis.com"
],
"ips": [
"192.178.183.94",
"2a00:1450:400a:1009::5f",
"188.114.96.3"
],
"asns": [
"15169",
"13335"
],
"countries": [
"US",
"CH"
],
"link_domains": [
"www.facebook.com",
"twitter.com",
"www.instagram.com",
"x.com",
"wordpress.org"
],
"social": [
"https://www.facebook.com/sharer/sharer.php",
"https://twitter.com/intent/tweet",
"https://www.instagram.com",
"https://x.com"
],
"doc_hash": "9dc98dd99272466d2a075b554ccd9c0f9dd2eebd96121e53f44853dbbaee31b7",
"script_hashes": [
"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf",
"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89",
"41f8607570bdc31a8875edc301a65ee01fbec5d4bd869388121bb25ce9361625",
"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8",
"adcfbd65e24e385bff72e8c5453dea2683b45905a53d00884ad9a26e752b20fc",
"14af47320898bd93f367026f7833c9956f14e24856976e4f9e10be31155cdcf2",
"815aacdbb28ccc31ad18743b3a744b0758c1ece54c5f3dca0b2f9e309a630241",
"7209e11a45cef119e8d3539afb2689835d17b16a0a22f8334d867cf77a220d2a",
"9cfc72f87bf1597df4da24dab70a531fc8666984b1393411d845b8e3cc68638f",
"76fa60ed57bfa134bdc5ebf61c8fc8f34c478abf3ddb5523fe14fed62e2ff8b9"
],
"globals": [
"$",
"jQuery",
"heateorSssLoadEvent",
"heateorSssSharingAjaxUrl",
"heateorSssCloseIconPath",
"heateorSssPluginIconPath",
"heateorSssSharingOffset",
"heateorSssMobileStickySharingEnabled",
"heateorSssCopyLinkMessage",
"heateorSssUrlCountFetched",
"heateorSssSharesText",
"heateorSssShareText",
"heateorSssPopup",
"heateorSssDetermineWhatsappShareAPI",
"heateorSssMoreSharingPopup",
"heateorSssMastodonPopup",
"heateorSssFilterSharing",
"heateorSssFacebookTargetUrls",
"heateorSssGetSharingCounts",
"heateorSssFetchFacebookShares",
"heateorSssFBShareJSONCall",
"heateorSssSaveFacebookShares",
"heateorSssCalculateApproxCount",
"heateorSssCalculateActualCount",
"heateorSssCapitaliseFirstLetter",
"heateorSssHideSharing",
"ClipboardJS",
"Swiper",
"bootstrap",
"AFurl",
"moove_frontend_gdpr_scripts",
"postscribe",
"gdpr_lightbox",
"gdpr_consent__strict",
"gdpr_consent__thirdparty",
"gdpr_consent__advanced",
"gdpr_consent__performance",
"gdpr_consent__preference",
"EvEmitter",
"imagesLoaded"
],
"storage_keys": [
"wpEmojiSettingsSupports"
],
"tls": {
"san": [
"tojuheo.com",
"*.tojuheo.com"
],
"cipher": "AES_128_GCM",
"issuer": "WE1",
"subject": "tojuheo.com",
"protocol": "QUIC",
"valid_to": "2026-09-14T09:05:12Z",
"valid_from": "2026-06-16T08:06:41Z"
},
"domain_age_days": 28,
"apex_age_days": 28,
"tls_age_days": 26,
"tls_valid_days": 90,
"requests": 66,
"verdicts": {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 93,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
},
"headers": {
"server": "cloudflare",
"content-type": "text/html; charset=UTF-8",
"priority": "u=0,i",
"link": "; rel=\"https://api.w.org/\", ; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", ; rel=shortlink"
}
},
"cf": {
"v": 1,
"fetched_at": "2026-11-04T20:11:36Z",
"uuid": "e97f30b3-8c82-41b3-9052-dd59f1731ca9",
"scanned_at": "2026-11-04T20:08:57Z",
"final_url": "https://tojuheo.com/",
"status": 308,
"redirected": "same-domain",
"history": [
{
"url": "https://tojuheo.com/",
"status": 308
}
],
"dom_hash": "0be15d34945b061b4688e4c7a258d982bf21eeec94f047738c21f26a19145958",
"domain_risks": [
"Malware",
"Security threats",
"CIPA Filter",
"CIPA"
],
"radar_rank": {
"bucket": ">200000"
},
"dns": [
{
"name": "tojuheo.com",
"type": "A",
"value": "188.114.96.0"
},
{
"name": "tojuheo.com",
"type": "A",
"value": "188.114.97.0"
},
{
"name": "tojuheo.com",
"type": "AAAA",
"value": "2a06:98c1:3121::"
},
{
"name": "tojuheo.com",
"type": "AAAA",
"value": "2a06:98c1:3120::"
}
],
"dnssec_valid": false,
"ip": "127.0.1.7",
"verdict": {
"tags": [
"malware"
],
"malicious": true,
"categories": [
"malware"
]
},
"whois": {
"registrar": "Dynadot Inc",
"created": "2026-06-16T08:18:01Z",
"updated": "2026-06-16T09:04:51Z",
"expires": "2027-06-16T08:18:01Z",
"nameservers": [
"algin.ns.cloudflare.com",
"nicole.ns.cloudflare.com"
]
}
},
"vt": {
"v": 1,
"fetched_at": "2026-11-04T20:07:17Z",
"analysis_at": "2026-11-02T16:52:06Z",
"stats": {
"timeout": 0,
"harmless": 46,
"malicious": 12,
"suspicious": 3,
"undetected": 31
},
"detections": {
"DNS8": "suspicious",
"ESET": "suspicious",
"VIPRE": "phishing",
"G-Data": "phishing",
"Lionic": "phishing",
"Sophos": "phishing",
"Webroot": "malicious",
"Fortinet": "phishing",
"SOCRadar": "phishing",
"Kaspersky": "phishing",
"Seclookup": "malicious",
"Gridinsoft": "suspicious",
"BitDefender": "phishing",
"alphaMountain.ai": "phishing",
"Forcepoint ThreatSeeker": "phishing"
},
"reputation": 0,
"tags": [
"dga"
],
"registrar": "Dynadot Inc",
"created": "2026-06-16T08:18:01Z",
"expires": "2027-06-16T08:18:01Z",
"updated": "2026-06-16T09:04:51Z",
"first_seen": "2026-06-16T09:29:00Z",
"dns": [
{
"ttl": 21600,
"type": "NS",
"value": "nicole.ns.cloudflare.com"
},
{
"ttl": 21600,
"type": "NS",
"value": "algin.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:3032::6815:22f9"
},
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:3035::ac43:a6a5"
},
{
"ttl": 300,
"type": "A",
"value": "172.67.166.165"
},
{
"ttl": 1800,
"type": "SOA",
"rname": "dns.cloudflare.com",
"value": "algin.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "A",
"value": "104.21.34.249"
}
],
"dns_at": "2026-11-02T16:57:21Z",
"jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
"cert": {
"san": [
"tojuheo.com",
"*.tojuheo.com"
],
"issuer": "Google Trust Services / WE1",
"serial": "1b87b4c57934ac7d0e666cb06e1c7439",
"sha256": "5704a2a9acefb4bbce446567648f98d916435512fcee15f9c721e0b5af0191b9",
"subject": "tojuheo.com",
"valid_to": "2027-01-10T14:51:28Z",
"valid_from": "2026-10-12T13:51:36Z"
},
"whois": {
"registrar": "Dynadot Inc",
"registrar_iana_id": "472",
"registrar_url": "http://www.dynadot.com",
"created": "2026-06-16T08:18:01Z",
"updated": "2026-06-16T09:04:51Z",
"expires": "2027-06-16T08:18:01Z",
"status": [
"clientTransferProhibited"
],
"nameservers": [
"algin.ns.cloudflare.com",
"nicole.ns.cloudflare.com"
],
"dnssec": "unsigned"
},
"rdap": {
"status": [
"transfer prohibited"
],
"events": {
"expiration": "2027-06-16T08:18:01Z",
"last changed": "2026-06-16T09:04:51Z",
"registration": "2026-06-16T08:18:01Z",
"registrar expiration": "2027-06-16T08:18:01Z",
"last update of RDAP database": "2026-10-29T18:09:34Z"
}
}
},
"webcheck": {
"v": 1,
"fetched_at": "2026-11-04T20:11:57Z",
"mail_config": {
"spf_lookups": 0
},
"block_lists": {
"resolvers": 12,
"blocked_by": [
"CloudFlare Family"
],
"blocked_count": 1
},
"status": {
"up": true,
"code": 308,
"timings": {
"dns": 5,
"tls": 28,
"wait": 46,
"connect": 27,
"download": 0
},
"response_ms": 106
},
"tls_connection": {
"alpn": "h2",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1",
"TLSv1.1",
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
},
"ports": {
"open": [
80,
443,
8080
]
},
"dns_server": {
"ns": [
{
"ip": "172.64.32.211",
"host": "nicole.ns.cloudflare.com"
},
{
"ip": "172.64.33.61",
"host": "algin.ns.cloudflare.com"
}
],
"zone": "tojuheo.com"
},
"location": {
"ip": "2a06:98c1:3120::3",
"asn": "13335",
"org": "CloudFLARENET-EU",
"city": "London",
"country": "GB"
},
"ssl": {
"issuer": "Google Trust Services / WE1",
"subject": "tojuheo.com"
},
"dns": {
"A": [
"188.114.97.3",
"188.114.96.3"
],
"NS": [
"algin.ns.cloudflare.com",
"nicole.ns.cloudflare.com"
],
"SOA": "{\"nsname\": \"algin.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417399157, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
"AAAA": [
"2a06:98c1:3121::3",
"2a06:98c1:3120::3"
]
},
"dnssec": {
"ds": false,
"rrsig": false,
"dnskey": false
},
"hsts": {
"message": "Site does not serve any HSTS headers."
},
"get_ip": {
"ip": "2a06:98c1:3121::3",
"family": 6
},
"redirects": {
"chain": [
"https://tojuheo.com",
"https://tojuheo.com/"
],
"count": 12
},
"whois": {
"registrar": "Dynadot Inc",
"created": "2026-06-16T08:18:01Z",
"updated": "2026-06-16T09:04:51Z",
"expires": "2027-06-16T08:18:01Z",
"status": [
"clientTransferProhibited https://icann.org/epp"
],
"nameservers": [
"algin.ns.cloudflare.com",
"nicole.ns.cloudflare.com"
]
}
}
}
```
Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/us/019f5765-a952-7391-aee0-ac984b391ea0.png","source":"URLScan","report_url":"https://urlscan.io/result/019f5765-a952-7391-aee0-ac984b391ea0/","captured_at":"2026-07-12T17:35:15Z","sha256":"0dd9d7f66b67135eb5bd440f0d154ef325b446da7deb2749ccb11110cb2c3022","model_image_sha256":"6cfcfcb99106b9c1cb85be4e102977cfbc0115ada20af58c88fbd4089237aafe","available":true,"content_status":null}
## Complete dated records
Availability observations: https://phishdestroy.io/domain/tojuheo.com/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/tojuheo.com/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/tojuheo.com/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/tojuheo.com/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/tojuheo.com/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/tojuheo.com/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/tojuheo.com/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/tojuheo.com/records.json?source=content&format=json
## Dated availability observation
Latest stored reachability observation
```json
{
"state": "alive",
"label_key": "availability.active",
"detail_key": "detail.latest_reachability",
"params": [],
"source": "current_http_probe",
"record_id": 1793567,
"scope": "checked_url",
"observed_at": "2026-11-05T00:10:57Z",
"http_status": 308,
"http_observed_at": "2026-11-05T00:10:57Z",
"stored_http_code": 308,
"stored_http_observed_at": "2026-11-05T00:10:57Z",
"legacy_site_status": "alive",
"supports_outcome_badge": false,
"content_classification": "unknown",
"content_classification_at": null,
"registration_state": "unknown",
"policy": "20261102-dated-availability-v2"
}
```