ykone-tiktok[.]shop

This domain, ykone-tiktok.shop, is identified as a credential harvesting phishing site designed to impersonate legitimate social commerce platforms. Analysis indicates the page presents itself as 'YKONE TikTok Shop | Premium Creator Commerce,' specifically targeting users of creator-focused e-commerce services. The objective appears to be the collection of login credentials, payment details, or other sensitive personal information through fraudulent account access portals or checkout processes. Infrastructure analysis reveals multiple high-risk indicators associated with this domain. The domain was registered on May 20, 2026, through GoDaddy.com LLC, an uncommon registrar for legitimate commerce platforms. It resolves to the IP address 76.76.21.21, hosted by Vercel, Inc. in the United States, a provider frequently abused for transient phishing operations. Security detection systems have flagged this domain extensively: VirusTotal reports 18 out of 95 security vendors marking it as malicious, and it appears on one security blocklist. The SSL certificate, issued by Let's Encrypt, provides basic encryption but does not validate legitimacy. Users who have visited ykone-tiktok.shop or entered any credentials on the site should immediately take corrective actions. All passwords associated with the account should be changed, particularly for the targeted platform and any other services where the same credentials may have been reused. Financial institutions should be notified if payment details were submitted. Monitoring for unauthorized transactions or account activity is strongly recommended. The domain has since been taken offline, but users should remain vigilant for similar phishing attempts using comparable domain names or branding.