go-dji[.]shop

This domain, go-dji.shop, poses a brand impersonation threat targeting Apple users. Analysis indicates the site mimics Apple's branding to deceive visitors into entering sensitive credentials or downloading malicious payloads, likely under the guise of legitimate Apple services or promotions. The page title, 'eBay,' suggests an attempt to obfuscate its true intent or exploit user trust in unrelated platforms, further complicating detection by non-technical users. Infrastructure analysis reveals the domain was registered on February 21, 2026, through ALIBABA.COM SINGAPORE E-COMMERCE PRIVATE LIMITED. It resolves to the IP address 104.21.73.60, hosted on AS13335 Cloudflare, Inc. in the United States. The domain lacks an SSL certificate, a critical red flag for secure communications. VirusTotal reports 20 out of 95 security vendors flagging this domain as malicious, and it appears on one security blocklist. The domain is currently offline, but its infrastructure remains a potential vector for future malicious activity. Users who visited go-dji.shop should immediately revoke any credentials entered on the site, particularly those associated with Apple IDs or financial services. Monitor accounts for unauthorized transactions or changes, and consider enabling multi-factor authentication where available. If the site was accessed via a corporate network, report the incident to the security team for further investigation. Given the domain's use of Cloudflare infrastructure, organizations may also review logs for connections to 104.21.73.60 to identify potential compromise indicators.