tikclone[.]vercel[.]app

PhishDestroy has identified tikclone.vercel.app as a high-risk generic phishing domain currently active and posing a serious threat to users. The site masquerades as a TikTok clone, likely designed to steal login credentials or personal information from unsuspecting visitors. Its deceptive appearance and lack of legitimate affiliation with the official TikTok platform make it a clear phishing operation.

Technical analysis reveals several red flags: the domain resolves to IP 216.198.79.131 and was registered through Vercel on March 25, 2026, a relatively recent creation date often associated with malicious domains. VirusTotal reports that 12 out of 95 security vendors flag this domain as malicious, and it already appears on one security blocklist. The SSL certificate is issued by Google Trust Services (WR1), which provides a false sense of security but does not validate the site's legitimacy. The domain's page title explicitly states "TikTok Clone," confirming its intent to mimic the popular social media platform.

To protect yourself, never enter login credentials, personal data, or payment information on tikclone.vercel.app. If you have already interacted with the site, change your TikTok password immediately and enable two-factor authentication. Report the domain to your email provider and security tools to block further access. Always verify URLs before interacting, and use PhishDestroy's domain checker for real-time threat assessments. Staying cautious against such deceptive clones is essential to avoid account compromise and data theft.