tkmerchant-us.
tkmerchant-us.com presents a merchant login page for an E-Mall portal claiming TikTok Shop drop-shipping tools.
At a glance
Antivirus · registration · identity- 2 engines classified the URL as malicious and 2 as suspicious; 54 returned harmless, 34 returned undetected, and 0 returned no usable result.
- The domain was registered Jun 15, 2026 and was 34 days old at scan time.
- Operator identity: Claimed Only. Contact details are present but not independently verified
- Google Safe Browsing returned no listed threat categories for this address at scan time.
- The isolated page observation recorded 0 requests and did not mark the page as malicious.
Intelligence
tkmerchant-us.com shows a login page titled "Merchant Login - E-Mall" that invites users to sign into a claimed TikTok Shop drop-shipping dashboard. The domain was registered only 34 days before scanning. The page contains an email-and-password form but lists zero contact details, no domain email addresses, and no phone or postal information. Two antivirus engines flagged the URL as malicious and two more marked it suspicious. The hosting IP carries an abuse-confidence score of 0/100. These concrete signals support the phishing classification.
Evidence Map
One or more reputation sources recorded a concern
Contact details are present but not independently verified
Only partial behavior evidence was available
The domain was registered Jun 15, 2026 and was 34 days old at scan time.
- 1Domain only 34 days old at scan time
- 2Login form requests email and password credentials
- 3Zero contact details: no email, phone, or address
- 4Two engines flagged URL as malicious, two as suspicious
- 5Hosting IP carries abuse-confidence score of 0/100
Observed page content and visitor flow
The captured page displays the title "Merchant Login - E-Mall" and presents itself as a Global Merchant Portal for TikTok Shop drop-shipping. The visible text invites users to "Login to manage your store, inventory, and orders with ease" and includes standard email and password fields plus a "Sign Into Dashboard" button.
Domain age and registration
The domain tkmerchant-us.com was registered on 15 June 2026 and was only 34 days old at the time of analysis.
Contact and transparency signals
No domain email addresses, free-mail contacts, phone numbers, postal addresses, or social links appear on the page. The absence of these details is flagged as a concern because legitimate merchant platforms normally publish verifiable contact channels.
Security engine findings
Two antivirus engines classified the URL as malicious and two additional engines returned a suspicious result. The hosting IP shows an abuse-confidence score of 0/100 based on one report.
Redirect and visual observations
The redirect path contained zero hops. A full screenshot could not be captured, leaving visual analysis inconclusive, yet the login form itself was recorded.
Website Preview
We could not capture a fully-rendered screenshot of this page; visual analysis is inconclusive.
- 1Screenshot incomplete — site may be slow to render
Web Research
Threat Detection
Antivirus results, browser warnings, isolated page observations, and the threat pattern identified in this report.
Antivirus engine results
Evidence behind this threat profile
- 1Domain only 34 days old at scan time
- 2Login form requests email and password credentials
- 3Zero contact details: no email, phone, or address
- 4Two engines flagged URL as malicious, two as suspicious
- 5Hosting IP carries abuse-confidence score of 0/100
1 of 21 categories showed signals
This profile separates the site's primary threat from other patterns supported by the saved page evidence, public research, and security findings.
- Domain only 34 days old at scan time
- Login form requests email and password credentials
- Zero contact details: no email, phone, or address
- Two engines flagged URL as malicious, two as suspicious
- Hosting IP carries abuse-confidence score of 0/100
- AI analyst tagged this as phishing / data-harvesting.
Technical Details
Identity, domain, infrastructure, and connection facts saved with this scan.
July 20, 2026 at 3:29 AM UTCIdentity
6 facts- Operator
- Claimed Only
- On-domain email
- Not observed
- Other email
- 1 address
- Phone
- Not observed
- Postal address
- Not observed
- Social profiles
- Not observed
Domain
8 facts- Domain age
- 34 days old
- Registered
- Jun 15, 2026
- Registrar
- NameCheap, Inc.
- Expires
- Jun 15, 2027
- WHOIS updated
- Jun 15, 2026
- Registrant
- Unavailable
- Registration country
- Unavailable
- WHOIS privacy
- Not observed
Infrastructure
14 facts- HTTPS
- Valid certificate
- TLS protocol
- TLSv1.3
- Certificate issuer
- Let's Encrypt · YR2
- Certificate subject
- tkmerchant-us.com
- Certificate valid from
- Jul 3, 2026
- Certificate valid to
- Oct 1, 2026
- Network address
- 157.245.204.152
- ASN
- AS14061
- Hosting organization
- DIGITALOCEAN-ASN - DigitalOcean, LLC, US
- Country
- SG
- Server
- nginx
- Site platform
- Unavailable
- IP reputation
- 0% confidence · 1 reports
- Tor exit node
- No
Connections
13 facts- Scan scope
- Domain
- Destination host
- tkmerchant-us.com
- Redirects
- 0
- Cross-domain redirect
- No
- Redirect status codes
- 404
- Lookalike characters
- Not observed
- Internationalized domain
- No
- Page response
- 200
- Observation coverage
- Complete
- Extracted links
- 0
- Unique IPs contacted
- 0
- Countries contacted
- 2
- Referenced domains
- 2
What to do
Do not enter credentials. Avoid visiting the site and report the URL to your security provider.
If you entered a password, change it on the official service by typing its known address yourself, enable two-factor authentication, and review recent account activity. Contact your bank if you also entered payment details.
Final Verdict
Why this verdict
The site is classified malicious and placed in the phishing category. A 34-day-old domain hosts a login form that requests email and password credentials, while contact fields, phone numbers, and postal addresses are entirely absent.
Do not enter credentials. Avoid visiting the site and report the URL to your security provider.
Key evidence
- 1Domain only 34 days old at scan time
- 2Login form requests email and password credentials
- 3Zero contact details: no email, phone, or address
Safety FAQ
Is tkmerchant-us.com safe to use?+
The site is classified malicious and placed in the phishing category. A 34-day-old domain hosts a login form that requests email and password credentials, while contact fields, phone numbers, and postal addresses are entirely absent.
What should I do about tkmerchant-us.com?+
Do not enter credentials. Avoid visiting the site and report the URL to your security provider.
How old is tkmerchant-us.com?+
tkmerchant-us.com is 34 days old and was registered jun 15, 2026.
What if I already interacted with tkmerchant-us.com?+
If you entered a password, change it on the official service by typing its known address yourself, enable two-factor authentication, and review recent account activity. Contact your bank if you also entered payment details.
When was this report updated?+
This report reflects the scan completed July 20, 2026 at 3:29 AM UTC.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.