yuenandabaotksyy[.]top

This domain, yuenandabaotksyy.top, is confirmed as a brand impersonation site targeting Apple users. Analysis indicates the site masquerades as a legitimate platform under the page title 'TikTok Mall,' likely designed to exploit trust in both Apple and TikTok branding to facilitate credential theft or fraudulent transactions. No evidence of a crypto drainer kit was observed, but the combination of brand impersonation and deceptive page titles suggests a focus on social engineering tactics to harvest sensitive user data. Infrastructure analysis reveals the domain was registered on October 12, 2025, through NameSilo, LLC, and resolves to the IP address 45.194.36.161, hosted under AS138995 (Antbox Networks Limited) in Hong Kong. The domain currently holds a VirusTotal detection score of 18/95 security vendors, indicating moderate but consistent recognition as malicious. It appears on two security blocklists, specifically PhishDestroy and PhishingDB, and lacks an SSL certificate, further reducing its legitimacy. The domain was created recently, aligning with typical patterns of short-lived phishing infrastructure. As of the latest assessment, yuenandabaotksyy.top has been taken offline, reducing immediate exposure risk. However, the infrastructure remains registered, and the IP address may still host other malicious domains. Organizations are advised to block the domain and associated IP at the network level, monitor for related domains registered through the same registrar, and alert users to the brand impersonation tactics observed. Given the elevated risk level, continued vigilance is recommended, particularly for users who may have interacted with the site prior to its takedown.