tiktokseller.aoyolo.com
Categoria: Phishing
Para usar o produto com todas as funcionalidades, tem de adquirir uma licença do Combo Cleaner. Está disponível um teste gratuito limitado de sete dias. O Combo Cleaner é propriedade e operado pela RCS LT, a empresa-mãe do PCRisk.com.
Descrição de tiktokseller.aoyolo.com
This subdomain appears to present itself as a TikTok Shop Seller Center login page, with Chinese-language navigation and a credential form for email and password entry. Based on the screenshot and domain structure, it seems intended to target sellers or business users looking for access to a commerce or account-management portal associated with TikTok Shop.
However, the site is hosted on the subdomain tiktokseller.aoyolo.com rather than on an official TikTok-owned domain. That mismatch, combined with the branding shown on the page, suggests it may be attempting to imitate a legitimate seller login experience rather than operating as an official service. The underlying parent domain appears to be aoyolo.com, not a recognized TikTok web property based on the available scan data.
Avaliação de segurança de tiktokseller.aoyolo.com
The scan results indicate substantial risk signals at the time of this scan. The URL was flagged by 18 out of 91 security engines, with multiple detections classifying it as phishing or malicious, and it was also listed by a major threat database for social-engineering activity. In addition, the domain's IP address appears on one mail-reputation blocklist; that signal is weaker than direct phishing detections, but it still adds a small amount of caution.
The page content itself also raises concern because it closely imitates a TikTok Shop Seller Center login screen while using a non-official domain. That kind of branding mismatch is commonly associated with credential-harvesting attempts. Although one malware scan reported no malicious files at the time of inspection, clean file results do not outweigh the broader phishing indicators and the visual resemblance to a known brand login portal.
Based on these findings, this website may pose potential risks to visitors.
Descrição técnica
The domain is an older subdomain under a parent domain registered in 2012, using nameservers associated with Alibaba Cloud infrastructure and resolving to an IP address hosted in Shenzhen, China. DNSSEC appears to be unsigned. The site is not ranked in major traffic data, which may indicate limited visibility or a narrowly targeted campaign.
A notable technical concern is that SSL/TLS was reported as invalid or missing at the time of the scan, despite a recorded certificate expiry timestamp being present in the data. The web server software was not identified. The combination of unclear TLS status, non-official hosting context, and a branded login page on a third-party domain may increase the likelihood of credential interception or user confusion.
Partilhe a sua experiência com este website. Era seguro? Encontrou algum problema?