m[.]juyhgtfrd[.]cc
“TikTok.Shop”
m.juyhgtfrd.cc — Konten tidak tersedia. Peniruan identitas merek: TikTok; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 15/95 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, CyRadar); URLQuery 100 det.; URLScan malicious verdict; PhishDestroy score 95/100. Registrar: Gname.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of the domain m.juyhgtfrd.cc shows a clear pattern of brand impersonation targeting TikTok. The domain was registered on October 28, 2025 through Gname.com Pte. Ltd. and resolves to the IP address 137.220.154.61, which is hosted in Hong Kong under ASN 4907 (BGPNET PTE. LTD.). No TLS certificate is presented, indicating that the site is served over plain HTTP only. The authoritative nameservers listed are a5.share-dns.com and b5.share-dns.net, both commonly associated with disposable or shared DNS services.
The page title returned by the server is "TikTok.Shop", directly referencing the TikTok brand and confirming the intent to mislead users. VirusTotal records show that 15 of 95 security vendors have flagged the domain, reflecting a moderate level of detection across the community. The domain appears on a single public blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing its classification as a malicious resource. Gridinsoft assigns a trust score of 0 out of 100, indicating no confidence in the domain’s legitimacy.
Current network observations indicate the domain is taken offline, but the infrastructure components remain observable and could be re‑activated. Defenders should continue to block the IP address 137.220.154.61 and the domain name in perimeter security controls, monitor for any re‑registration or resurrection of the host, and update threat intelligence feeds with the observed indicators of compromise. Additional investigation is needed to determine whether the site previously hosted credential‑harvesting forms or other payloads, as the content of the page beyond the title has not been captured. Until such details are known, the precautionary stance should remain elevated due to the confirmed brand impersonation and the presence of multiple vendor detections.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive