tiktokseller.aoyolo.com
Kategoria: Phishing
Aby korzystać z produktu z pełną funkcjonalnością, musisz kupić licencję na Combo Cleaner. Dostępny jest ograniczony siedmiodniowy bezpłatny okres próbny. Combo Cleaner należy do RCS LT i jest obsługiwany przez tę firmę, spółkę macierzystą PCRisk.com.
Opis tiktokseller.aoyolo.com
This subdomain appears to present itself as a TikTok Shop Seller Center login page, with Chinese-language navigation and a credential form for email and password entry. Based on the screenshot and domain structure, it seems intended to target sellers or business users looking for access to a commerce or account-management portal associated with TikTok Shop.
However, the site is hosted on the subdomain tiktokseller.aoyolo.com rather than on an official TikTok-owned domain. That mismatch, combined with the branding shown on the page, suggests it may be attempting to imitate a legitimate seller login experience rather than operating as an official service. The underlying parent domain appears to be aoyolo.com, not a recognized TikTok web property based on the available scan data.
Ocena bezpieczeństwa tiktokseller.aoyolo.com
The scan results indicate substantial risk signals at the time of this scan. The URL was flagged by 18 out of 91 security engines, with multiple detections classifying it as phishing or malicious, and it was also listed by a major threat database for social-engineering activity. In addition, the domain's IP address appears on one mail-reputation blocklist; that signal is weaker than direct phishing detections, but it still adds a small amount of caution.
The page content itself also raises concern because it closely imitates a TikTok Shop Seller Center login screen while using a non-official domain. That kind of branding mismatch is commonly associated with credential-harvesting attempts. Although one malware scan reported no malicious files at the time of inspection, clean file results do not outweigh the broader phishing indicators and the visual resemblance to a known brand login portal.
Based on these findings, this website may pose potential risks to visitors.
Opis techniczny
The domain is an older subdomain under a parent domain registered in 2012, using nameservers associated with Alibaba Cloud infrastructure and resolving to an IP address hosted in Shenzhen, China. DNSSEC appears to be unsigned. The site is not ranked in major traffic data, which may indicate limited visibility or a narrowly targeted campaign.
A notable technical concern is that SSL/TLS was reported as invalid or missing at the time of the scan, despite a recorded certificate expiry timestamp being present in the data. The web server software was not identified. The combination of unclear TLS status, non-official hosting context, and a branded login page on a third-party domain may increase the likelihood of credential interception or user confusion.
Podziel się swoimi doświadczeniami z tą witryną. Czy była bezpieczna? Czy wystąpiły jakieś problemy?