openlink-wildberies[.]info

Analysis of openlink-wildberies.info, observed as offline as of 23 July 2026, shows it was registered on 21 February 2026 and hosts a page whose title is “Tiktok”. The site is classified as a Social Media Phishing campaign that impersonates the TikTok brand. The domain resolves to IP 188.114.96.3, which belongs to Cloudflare (AS13335) and is geolocated in the United States. Reputation services assign a zero‑point trust rating: Gridinsoft reports 0/100, Scamadviser reports 0/100, indicating a lack of legitimacy.

The SSL certificate is identified only as “WE1”, suggesting a weak or self‑signed certificate. VirusTotal scans returned 14 positive detections out of 93 participating vendors, confirming that multiple anti‑malware engines flag the host. AlienVault OTX lists the domain in two separate threat‑intel pulses, and it appears on at least one public blocklist. PhishDestroy has also blocked the domain.

The combination of brand‑specific page title, low trust scores, weak TLS, and multiple vendor detections points to an elevated risk of credential harvesting targeting TikTok users. Uncertainty remains regarding the exact phishing kit or payload, as no malware hash or URL path information is available. Defenders should add 188.114.96.3 to network deny lists, enforce URL filtering for the domain, and monitor for any login attempts to TikTok from this IP range. Continuous threat‑intel feeds should be consulted for updates, and any observed malicious traffic should be logged and reported to relevant brand‑abuse channels.