97683[.]app

This domain, 97683.app, is identified as a high-severity phishing resource specializing in brand impersonation targeting TikTok. Analysis confirms the site masquerades as the official TikTok platform, presenting an identical page title (TikTok) to deceive users into submitting login credentials or other sensitive information. The infrastructure exhibits no evidence of a deployed drainer kit, suggesting a focused credential-harvesting objective rather than cryptocurrency theft. The domain’s design and content align with known TikTok phishing templates, which typically exploit the platform’s widespread user base to maximize compromise potential. Technical indicators reveal critical red flags: the domain is flagged by 17 of 95 security vendors on VirusTotal, including detection as phishing by Google Safe Browsing. Registered through Dynadot LLC on September 03, 2025, the domain resolves to the IP address 38.46.13.34, hosted under AS9294 (GNET INC.) in Hong Kong. The absence of an SSL certificate further undermines secure communication claims, a common tactic to avoid encryption-based scrutiny. Only one security blocklist currently lists the domain, though this may reflect delayed propagation rather than low risk. As of the latest assessment, 97683.app has been taken offline, likely in response to abuse reports or automated takedown mechanisms. However, the domain’s infrastructure remains registered, posing a residual risk of reactivation or migration to alternative hosting. Users who interacted with the site prior to its deactivation may remain vulnerable to credential misuse or follow-up social engineering attacks. Organizations are advised to monitor for credential leaks associated with this campaign and implement multi-factor authentication to mitigate account compromise risks. The domain’s registration details and hosting provider should be scrutinized for patterns of abuse in future phishing operations.