tiktokseller.aoyolo.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of tiktokseller.aoyolo.com
This subdomain appears to present itself as a TikTok Shop Seller Center login page, with Chinese-language navigation and a credential form for email and password entry. Based on the screenshot and domain structure, it seems intended to target sellers or business users looking for access to a commerce or account-management portal associated with TikTok Shop.
However, the site is hosted on the subdomain tiktokseller.aoyolo.com rather than on an official TikTok-owned domain. That mismatch, combined with the branding shown on the page, suggests it may be attempting to imitate a legitimate seller login experience rather than operating as an official service. The underlying parent domain appears to be aoyolo.com, not a recognized TikTok web property based on the available scan data.
Safety Assessment for tiktokseller.aoyolo.com
The scan results indicate substantial risk signals at the time of this scan. The URL was flagged by 18 out of 91 security engines, with multiple detections classifying it as phishing or malicious, and it was also listed by a major threat database for social-engineering activity. In addition, the domain's IP address appears on one mail-reputation blocklist; that signal is weaker than direct phishing detections, but it still adds a small amount of caution.
The page content itself also raises concern because it closely imitates a TikTok Shop Seller Center login screen while using a non-official domain. That kind of branding mismatch is commonly associated with credential-harvesting attempts. Although one malware scan reported no malicious files at the time of inspection, clean file results do not outweigh the broader phishing indicators and the visual resemblance to a known brand login portal.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The domain is an older subdomain under a parent domain registered in 2012, using nameservers associated with Alibaba Cloud infrastructure and resolving to an IP address hosted in Shenzhen, China. DNSSEC appears to be unsigned. The site is not ranked in major traffic data, which may indicate limited visibility or a narrowly targeted campaign.
A notable technical concern is that SSL/TLS was reported as invalid or missing at the time of the scan, despite a recorded certificate expiry timestamp being present in the data. The web server software was not identified. The combination of unclear TLS status, non-official hosting context, and a branded login page on a third-party domain may increase the likelihood of credential interception or user confusion.
Share your experience with this website. Was it safe? Did you encounter any issues?