vipshopa[.]top
“TK-SHOP”
Resumen de las pruebas
The domain vipshopa.top was registered on December 26, 2025 through Namemart Limited and is currently taken offline. Infrastructure analysis shows the domain resolves to IP address 103.82.212.167, which is hosted in Hong Kong under ASN 59371 operated by Dimension Network & Communication Limited. The authoritative name servers listed for the domain are ns1.domainnamedns.com, ns2.domainnamedns.com, ns3.domainnamedns.com, and ns4.domainnamedns.com, indicating a typical shared DNS service. The TLS certificate presented is identified as R12, though no further certificate details are available.
The web page title returned during the brief live period was "TK-SHOP," and the campaign is classified as a Tech Support Scam that impersonates Apple. VirusTotal scans recorded fifteen positive detections out of ninety‑three security vendors, reflecting a moderate level of awareness among scanning engines. AlienVault OTX references the domain in a single threat‑intelligence pulse, and the domain appears on one public security blocklist, with PhishDestroy confirming it as blocked.
The elevated risk rating aligns with the brand impersonation and the technical support fraud pattern. Defensive recommendations include adding vipshopa.top and its associated IP 103.82.212.167 to network blocklists, monitoring for any resurgence of the domain or related subdomains, and ensuring endpoint protection solutions incorporate the fifteen VirusTotal detections as indicators of compromise. Continuous observation of the registrar Namemart Limited for future registrations may also help anticipate similar campaigns.
Data Coverage
Inteligencia de seguridad de red
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | vipshopa.top |
malicious | Sinkholed |
| OpenDNS | vipshopa.top |
phishing | Phishing Block |
| DigiCert UltraDNS | vipshopa.top |
malicious | Sinkholed |
| Hagezi Threat Feed | vipshopa.top |
malicious | Sinkholed |
| DNS0 Zero | vipshopa.top |
malicious | Sinkholed |
| DNS4EU | vipshopa.top |
malicious | Sinkholed |
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 13/08/2026
10 fuentes externas supervisadas Sin coincidencias
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.