TikTok

Social media Singaporetiktok.comRank 53 of the most impersonated
Cert findings · 24 h
8
Cert findings · 7 days
27
27 on phishing hosts
Registered lookalikes
585
51 listed by a source or an address list
Official domains
10
verified from TikTok's own sites and records

Certificate findings for TikTok

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to TikTok's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 43 findings, grouped by hostname

  1. tiktok-emojis.com US · AS46475 · Limestone Networks, Inc.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 2 y ago
    DetailsHide
    Hostname
    tiktok-emojis.com
    First seen
    2026-11-05 09:01 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 208.115.249.236.
    1. Phishing-host list fetched with the address
    2. Resolved to 208.115.249.236
    Brand
    TikTok
    Addresses
    208.115.249.236 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.
    37.48.72.213 · Netherlands · AS60781 LEASEWEB-NL-AMS-01 LeaseWeb Netherlands B.V.
    Domain
    tiktok-emojis.com
    Registered
    2024-09-13 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:41 UTC

    Suggest a correction

  2. tiktokshop.ph NL · AS43350 · NFORCE NForce Entertainment…2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    tiktokshop.ph
    First seen
    2026-11-05 08:59 UTC
    First published
    2026-10-28 06:38 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 212.92.105.198.
    1. Phishing-host list fetched with the address
    2. Resolved to 212.92.105.198
    Brand
    TikTok
    Addresses
    212.92.105.198 · Netherlands · AS43350 NFORCE NForce Entertainment B.V.
    172.93.103.102 · United States · AS23470 RELIABLESITE - ReliableSite.Net LLC
    Domain
    tiktokshop.ph
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  3. tiktokpay.ru RU · AS49505 · SELECTEL JSC Selectel
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    tiktokpay.ru
    First seen
    2026-11-05 01:16 UTC
    First published
    2026-11-05 01:50 UTC
    DNS
    Resolves · checked 2026-11-05 02:00 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.246.224.242.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 188.246.224.242
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 00:12 UTC to 2027-02-03 00:12 UTC
    Logged 2026-11-05 01:10 UTC in Google ParcelYard2027h1, entry 617,633,219
    SHA-256 975e79eb753eb8e9cad30174cb606d786914958fde6ce87015fe01175276061f
    Public key SHA-256 bc07198dbf6359965e377661dff6b09fae13dc01e5a368613b8c965a115c7ea5
    Brand
    TikTok
    Addresses
    188.246.224.242 · Russia · AS49505 SELECTEL JSC Selectel
    Domain
    tiktokpay.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:20 UTC

    Suggest a correction

  4. www.tiktokpay.ru RU · AS49505 · SELECTEL JSC Selectel
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.tiktokpay.ru
    First seen
    2026-11-05 01:15 UTC
    First published
    2026-11-05 01:50 UTC
    DNS
    Resolves · checked 2026-11-05 02:00 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.246.224.242.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 188.246.224.242
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-05 00:12 UTC to 2027-02-03 00:12 UTC
    Logged 2026-11-05 01:10 UTC in Google ParcelYard2027h1, entry 617,633,219
    SHA-256 975e79eb753eb8e9cad30174cb606d786914958fde6ce87015fe01175276061f
    Public key SHA-256 bc07198dbf6359965e377661dff6b09fae13dc01e5a368613b8c965a115c7ea5
    Brand
    TikTok
    Addresses
    188.246.224.242 · Russia · AS49505 SELECTEL JSC Selectel
    Domain
    tiktokpay.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:20 UTC

    Suggest a correction

  5. tiktok-vn.shop VN · AS45903 · CMC Telecom Infrastructure …
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 10 mo ago
    DetailsHide
    Hostname
    tiktok-vn.shop
    First seen
    2026-11-04 20:11 UTC
    First published
    2026-11-04 21:09 UTC
    DNS
    Resolves · checked 2026-11-04 21:16 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 203.171.27.189.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 203.171.27.189
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-04 19:01 UTC to 2027-02-02 19:01 UTC
    Logged 2026-11-04 19:59 UTC in Google PlumbersArms2027h1, entry 614,224,634
    SHA-256 061a29861ab37f70a8e68bd4139eee1c0b13e72386fc3d39d50233eaef9f1695
    Public key SHA-256 7b4bd5a6a8e98807d64ba0123d2ddba59c9ae2988fad1252e534b48a749bcb14
    Brand
    TikTok
    Addresses
    203.171.27.189 · Vietnam · AS45903 CMCTELECOM-VN - CMC Telecom Infrastructure Company
    Domain
    tiktok-vn.shop
    Registered
    2026-01-03 · GMO Internet, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 20:14 UTC

    Suggest a correction

  6. mail2.casinox-tiktok.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missing
    DetailsHide
    Hostname
    mail2.casinox-tiktok.ru
    First seen
    2026-11-04 19:47 UTC
    First published
    2026-11-04 20:01 UTC
    DNS
    Resolves · checked 2026-11-04 20:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 186.2.174.131.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 186.2.174.131
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-04 18:46 UTC to 2027-02-02 18:46 UTC
    Logged 2026-11-04 19:44 UTC in Let's Encrypt Willow2027h1, entry 937,531,740
    SHA-256 16165666a856be251406c91d86fac50587592197de3d82b0983a8cd97f97411c
    Public key SHA-256 89338b34c06ec0bea1cb07867586b6208f13a19032710e8cde85afc5ec1d112a
    Brand
    TikTok
    Addresses
    186.2.174.131 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    casinox-tiktok.ru
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  7. m.casinox-tiktok.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missing
    DetailsHide
    Hostname
    m.casinox-tiktok.ru
    First seen
    2026-11-04 19:47 UTC
    First published
    2026-11-04 20:01 UTC
    DNS
    Resolves · checked 2026-11-04 20:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 186.2.174.131.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 186.2.174.131
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-04 18:46 UTC to 2027-02-02 18:46 UTC
    Logged 2026-11-04 19:44 UTC in Let's Encrypt Willow2027h1, entry 937,531,740
    SHA-256 16165666a856be251406c91d86fac50587592197de3d82b0983a8cd97f97411c
    Public key SHA-256 89338b34c06ec0bea1cb07867586b6208f13a19032710e8cde85afc5ec1d112a
    Brand
    TikTok
    Addresses
    186.2.174.131 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    casinox-tiktok.ru
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  8. join.casinox-tiktok.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missing
    DetailsHide
    Hostname
    join.casinox-tiktok.ru
    First seen
    2026-11-04 13:21 UTC
    First published
    2026-11-04 13:59 UTC
    DNS
    Resolves · checked 2026-11-04 14:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 186.2.174.131.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 186.2.174.131
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-04 12:17 UTC to 2027-02-02 12:17 UTC
    Logged 2026-11-04 13:16 UTC in Google PlumbersArms2027h1, entry 609,316,062
    SHA-256 394509f5e9624a894bd9e761ecee6f9544c6cb9e310c7606e0056657f46168a4
    Public key SHA-256 bd72f29439a062d53ec2d07213761a65f616be9936ec7dd659cb795048d27628
    Brand
    TikTok
    Addresses
    186.2.174.131 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    casinox-tiktok.ru
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  9. www.tiktok-login.ru DE · AS24940 · HETZNER-AS Hetzner Online G…
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    www.tiktok-login.ru
    First seen
    2026-11-04 00:37 UTC
    First published
    2026-11-04 01:42 UTC
    DNS
    Resolves · checked 2026-11-05 01:47 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 65.21.174.205.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 65.21.174.205
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-03 23:36 UTC to 2027-02-01 23:36 UTC
    Logged 2026-11-04 00:34 UTC in Google PlumbersArms2027h1, entry 599,861,031
    SHA-256 0c7ba98c7e032662906a2fe6e1aa792d5754c09ec40bc1b92a854ddd61351c3f
    Public key SHA-256 31726513f586de2cc1c744133a3ed1faa05abe3686205a04a78af0d105de73e9
    Brand
    TikTok
    Addresses
    65.21.174.205 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (65.21.174.205): a cloud provider. It rents servers and addresses to its customers.
    Domain
    tiktok-login.ru
    MX
    Receives mail at mail.tiktok-login.ru
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  10. tiktok-login.ru DE · AS24940 · HETZNER-AS Hetzner Online G…
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    tiktok-login.ru
    First seen
    2026-11-04 00:37 UTC
    First published
    2026-11-04 01:42 UTC
    DNS
    Resolves · checked 2026-11-05 01:47 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 65.21.174.205.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 65.21.174.205
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-03 23:36 UTC to 2027-02-01 23:36 UTC
    Logged 2026-11-04 00:34 UTC in Google PlumbersArms2027h1, entry 599,861,031
    SHA-256 0c7ba98c7e032662906a2fe6e1aa792d5754c09ec40bc1b92a854ddd61351c3f
    Public key SHA-256 31726513f586de2cc1c744133a3ed1faa05abe3686205a04a78af0d105de73e9
    Brand
    TikTok
    Addresses
    65.21.174.205 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (65.21.174.205): a cloud provider. It rents servers and addresses to its customers.
    Domain
    tiktok-login.ru
    MX
    Receives mail at mail.tiktok-login.ru
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  11. imap.casinox-tiktok.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missing
    DetailsHide
    Hostname
    imap.casinox-tiktok.ru
    First seen
    2026-11-03 21:21 UTC
    First published
    2026-11-03 21:33 UTC
    DNS
    Resolves · checked 2026-11-04 21:40 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 186.2.174.131.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 186.2.174.131
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-11-03 20:17 UTC to 2027-02-01 20:17 UTC
    Logged 2026-11-03 21:15 UTC in Google ParcelYard2027h1, entry 597,185,080
    SHA-256 9fb774a7477f59bb71e4dcbd281baac4faae7adfb0dafb3604230a9ba3f495d5
    Public key SHA-256 9b2c0a48a36a35595f683a7e9cdfd413056443b069777b9373cdd9d2d031161a
    Brand
    TikTok
    Addresses
    186.2.174.131 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    casinox-tiktok.ru
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  12. www.shop-ph-tiktok.com VN · AS45903 · CMC Telecom Infrastructure …
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 19 mo ago
    DetailsHide
    Hostname
    www.shop-ph-tiktok.com
    First seen
    2026-11-03 19:11 UTC
    First published
    2026-11-03 19:26 UTC
    DNS
    Resolves · checked 2026-11-04 19:33 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 203.171.27.189.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 203.171.27.189
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-03 18:11 UTC to 2027-02-01 18:11 UTC
    Logged 2026-11-03 19:10 UTC in Let's Encrypt Sycamore2027h1, entry 927,345,334
    SHA-256 1fdcf72e5eaf6ecd5e53b9d7101fa0d09721cc99e2638522e4fa57e3469ff16a
    Public key SHA-256 ab3b02428a322a37a7c3c78be1933a3be6c90136c31627620a6d558de2e13928
    Brand
    TikTok
    Addresses
    203.171.27.189 · Vietnam · AS45903 CMCTELECOM-VN - CMC Telecom Infrastructure Company
    Domain
    shop-ph-tiktok.com
    Registered
    2025-04-25 · NameCheap, Inc.
    MX
    Receives mail at eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

  13. tiktokio.info MD · AS200019 · AlexHost ALEXHOST S.R.L.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    tiktokio.info
    First seen
    2026-11-03 07:36 UTC
    First published
    2026-11-03 07:43 UTC
    DNS
    Resolves · checked 2026-11-05 07:49 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 217.156.8.54.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 217.156.8.54
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-03 00:00 UTC to 2027-01-30 05:24 UTC
    Logged 2026-11-03 07:35 UTC in GoDaddy Aquamarine2027h1, entry 172,028,255
    SHA-256 2102894f21ff924671c4b7212abb4b78ae1646aaa90c2a3ad5dcbaeee85e6e78
    Public key SHA-256 6e30b1e62f157cf1b606dd1a086811b6617fc27972f0b8145ebdab64482fc5f9
    Brand
    TikTok
    Addresses
    217.156.8.54 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    tiktokio.info
    Registered
    2025-12-05 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:36 UTC

    Suggest a correction

  14. www.tiktok18.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    www.tiktok18.icu
    First seen
    2026-11-03 02:57 UTC
    First published
    2026-10-30 10:44 UTC
    DNS
    Resolves · checked 2026-11-05 10:51 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.199.133.247
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-03 01:54 UTC to 2027-02-01 01:54 UTC
    Logged 2026-11-03 02:52 UTC in DigiCert Wyvern2027h1, entry 383,931,506
    SHA-256 4e82a88328c751a6389b7583ee04e135bfe095fee04b97c52ac8e480410cfa62
    Public key SHA-256 a92aeb0a27581e999feacab89e131270f04336327a464d1b55c5e6dda2fe4043
    Brand
    TikTok
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    85.121.4.201 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    tiktok18.icu
    Registered
    2025-12-04 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at mx.tiktok18.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 02:31 UTC

    Suggest a correction

  15. tiktok18.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 11 mo ago
    DetailsHide
    Hostname
    tiktok18.icu
    First seen
    2026-11-03 02:57 UTC
    First published
    2026-10-30 10:44 UTC
    DNS
    Resolves · checked 2026-11-05 10:51 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.199.133.247
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-03 01:54 UTC to 2027-02-01 01:54 UTC
    Logged 2026-11-03 02:52 UTC in DigiCert Wyvern2027h1, entry 383,931,506
    SHA-256 4e82a88328c751a6389b7583ee04e135bfe095fee04b97c52ac8e480410cfa62
    Public key SHA-256 a92aeb0a27581e999feacab89e131270f04336327a464d1b55c5e6dda2fe4043
    Brand
    TikTok
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    85.121.4.201 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    tiktok18.icu
    Registered
    2025-12-04 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Receives mail at mx.tiktok18.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 02:31 UTC

    Suggest a correction

  16. tiktok-mcn.net SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    tiktok-mcn.net
    First seen
    2026-11-02 16:37 UTC
    First published
    2026-11-02 16:54 UTC
    DNS
    Resolves · checked 2026-11-04 16:58 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-02 15:35 UTC to 2027-01-31 15:35 UTC
    Logged 2026-11-02 16:33 UTC in Let's Encrypt Willow2027h1, entry 899,145,664
    SHA-256 bf21391a0ce42fcfab677cddc7e3bf8042d1a83a74f92fb641f0322ee61b217b
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    TikTok
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    tiktok-mcn.net
    Registered
    2026-06-30 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 17:09 UTC

    Suggest a correction

  17. www.simplifike-tiktokshop.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    www.simplifike-tiktokshop.com
    First seen
    2026-11-02 02:06 UTC
    First published
    2026-11-02 03:20 UTC
    DNS
    Resolves · checked 2026-11-05 03:30 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-02 01:04 UTC to 2027-01-31 01:04 UTC
    Logged 2026-11-02 02:03 UTC in Let's Encrypt Sycamore2027h1, entry 895,983,371
    SHA-256 41f6fbf6d92cfd11abf98fb8e74adcdb103005b0a3c23a680687bde11e97a1ea
    Public key SHA-256 698ce631d0310e531532991a530ed3a2b6c99cfa7bc1871435e7ab988a63c8cb
    Brand
    TikTok
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    simplifike-tiktokshop.com
    Registered
    2026-08-11 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  18. simplifike-tiktokshop.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    simplifike-tiktokshop.com
    First seen
    2026-11-02 02:06 UTC
    First published
    2026-11-02 02:12 UTC
    DNS
    Resolves · checked 2026-11-05 02:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-02 01:04 UTC to 2027-01-31 01:04 UTC
    Logged 2026-11-02 02:03 UTC in Let's Encrypt Sycamore2027h1, entry 895,983,371
    SHA-256 41f6fbf6d92cfd11abf98fb8e74adcdb103005b0a3c23a680687bde11e97a1ea
    Public key SHA-256 698ce631d0310e531532991a530ed3a2b6c99cfa7bc1871435e7ab988a63c8cb
    Brand
    TikTok
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    simplifike-tiktokshop.com
    Registered
    2026-08-11 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  19. www.tiktok360.top SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 5 d ago
    DetailsHide
    Hostname
    www.tiktok360.top
    First seen
    2026-11-01 09:47 UTC
    First published
    2026-11-01 10:14 UTC
    DNS
    Resolves · checked 2026-11-05 10:21 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-01 08:44 UTC to 2027-01-30 08:44 UTC
    Logged 2026-11-01 09:42 UTC in Google PlumbersArms2027h1, entry 554,007,208
    SHA-256 5c228ba29f02fd837a3cf966daad7e18879274ae1a0ece3e77a811a826c502c0
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    TikTok
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    tiktok360.top
    Registered
    2026-10-31 · NameSilo,LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  20. tiktok360.top SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 5 d ago
    DetailsHide
    Hostname
    tiktok360.top
    First seen
    2026-11-01 02:52 UTC
    First published
    2026-11-01 02:59 UTC
    DNS
    Resolves · checked 2026-11-05 03:12 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-01 01:51 UTC to 2027-01-30 01:51 UTC
    Logged 2026-11-01 02:50 UTC in Geomys Tuscolo2027h1, entry 427,569,279
    SHA-256 0c2f26cbc4f00f8e1be1dcdfe6622b54c9c61a8b6e518b9995569bfc61d4e712
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    TikTok
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    tiktok360.top
    Registered
    2026-10-31 · NameSilo,LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  21. www.tiktokshop.video CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.tiktokshop.video
    First seen
    2026-10-31 22:06 UTC
    First published
    2026-10-31 22:45 UTC
    DNS
    Resolves · checked 2026-11-04 22:58 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-31 21:05 UTC to 2027-01-29 21:05 UTC
    Logged 2026-10-31 22:03 UTC in Google ParcelYard2027h1, entry 545,731,879
    SHA-256 a8e5198834bfeec6108bdf9d2e9f8840630e247579c5de3c6dc4ffd81f554929
    Public key SHA-256 2c6d9a84403c857254c78157d58722ac8768c0c5c22216cdbe05e9fa4c1dd88d
    Brand
    TikTok
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    tiktokshop.video
    Registered
    2026-05-18 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:22 UTC

    Suggest a correction

  22. tiktokshop.video CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    tiktokshop.video
    First seen
    2026-10-31 22:06 UTC
    First published
    2026-10-31 22:45 UTC
    DNS
    Resolves · checked 2026-11-04 22:58 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-31 21:05 UTC to 2027-01-29 21:05 UTC
    Logged 2026-10-31 22:03 UTC in Google ParcelYard2027h1, entry 545,731,879
    SHA-256 a8e5198834bfeec6108bdf9d2e9f8840630e247579c5de3c6dc4ffd81f554929
    Public key SHA-256 2c6d9a84403c857254c78157d58722ac8768c0c5c22216cdbe05e9fa4c1dd88d
    Brand
    TikTok
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    tiktokshop.video
    Registered
    2026-05-18 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:22 UTC

    Suggest a correction

  23. test.casinox-tiktok.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missing
    DetailsHide
    Hostname
    test.casinox-tiktok.ru
    First seen
    2026-10-31 01:57 UTC
    First published
    2026-10-31 02:53 UTC
    DNS
    Resolves · checked 2026-11-05 02:57 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 186.2.174.131.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 186.2.174.131
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-31 00:54 UTC to 2027-01-29 00:54 UTC
    Logged 2026-10-31 01:53 UTC in Google PlumbersArms2027h1, entry 532,516,577
    SHA-256 1c76a6cfb9aed13ad927f0dc74e521792cce6f4049c3e88b82aefff9db371508
    Public key SHA-256 6b29a69a7293799649b78f1c294c45ecbe23d944b30c6ab59ebbcf375c3549c5
    Brand
    TikTok
    Addresses
    186.2.174.131 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    casinox-tiktok.ru
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  24. tiktokcom.datasportslivevidexstreampro.dpdns.org US · AS19318 · Interserver, Inc
    Phishing hostInterserverAddress hosted confirmed phishing in the last 48 h
    DetailsHide
    Hostname
    tiktokcom.datasportslivevidexstreampro.dpdns.org
    First seen
    2026-10-30 03:51 UTC
    First published
    2026-10-30 04:55 UTC
    DNS
    Resolves · checked 2026-11-05 05:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 153.75.225.187.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 153.75.225.187
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-30 02:49 UTC to 2027-01-28 02:49 UTC
    Logged 2026-10-30 03:48 UTC in Geomys Tuscolo2027h1, entry 402,746,300
    SHA-256 0ac704f74846a07170bc7c59d60d1aa97b4535e18f9ae17b756c0bf3cc3c5547
    Public key SHA-256 63de1154a83eb1d6027bc50b6c1bae3dc0d372d3051b1d22d905c0c643ac035d
    Brand
    TikTok
    Addresses
    153.75.225.187 · United States · AS19318 IS-AS-1 - Interserver, Inc · Interserver (shared hosting)
    Interserver
    Interserver (153.75.225.187): shared web hosting and domain registration. One address typically serves many customer sites.

    Suggest a correction

  25. tiktokpro.org MD · AS200019 · AlexHost ALEXHOST S.R.L.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 8 d ago
    DetailsHide
    Hostname
    tiktokpro.org
    First seen
    2026-10-30 00:37 UTC
    First published
    2026-10-30 00:48 UTC
    DNS
    Resolves · checked 2026-11-05 00:53 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 176.123.0.199.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 176.123.0.199
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-29 23:33 UTC to 2027-01-27 23:33 UTC
    Logged 2026-10-30 00:31 UTC in Let's Encrypt Sycamore2027h1, entry 847,156,903
    SHA-256 5a7e0dad95c087bdced1a7baff74424aeba19a0f6959cdd92e5d69e46eeed4a3
    Public key SHA-256 08bb69fa791d82598ca778e3289090e93d09e9288f47268310ee92a09563ae91
    Brand
    TikTok
    Addresses
    176.123.0.199 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    tiktokpro.org
    Registered
    2026-10-28 · Key-Systems GmbH
    MX
    Receives mail at tiktokpro.org
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  26. xn--tiktok-gg4e.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    xn--tiktok-gg4e.com
    First seen
    2026-10-29 11:11 UTC
    First published
    2026-10-29 11:56 UTC
    DNS
    Resolves · checked 2026-11-04 12:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-29 10:09 UTC to 2027-01-27 10:09 UTC
    Logged 2026-10-29 11:08 UTC in DigiCert Wyvern2027h1, entry 346,675,174
    SHA-256 1ffd5afe2d30241fc890c617a6dfc275cf4f7d752bb4c2f971667e164e636152
    Public key SHA-256 60103ed871e0a8257b5ee70c7cf30ef76090dff3ddb3f73851d03d8efb6119e1
    Brand
    TikTok
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    xn--tiktok-gg4e.com
    Registered
    2026-08-07 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:35 UTC

    Suggest a correction

  27. www.xn--tiktok-gg4e.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    www.xn--tiktok-gg4e.com
    First seen
    2026-10-29 11:11 UTC
    First published
    2026-10-29 11:56 UTC
    DNS
    Resolves · checked 2026-11-04 12:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-29 10:09 UTC to 2027-01-27 10:09 UTC
    Logged 2026-10-29 11:08 UTC in DigiCert Wyvern2027h1, entry 346,675,174
    SHA-256 1ffd5afe2d30241fc890c617a6dfc275cf4f7d752bb4c2f971667e164e636152
    Public key SHA-256 60103ed871e0a8257b5ee70c7cf30ef76090dff3ddb3f73851d03d8efb6119e1
    Brand
    TikTok
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    xn--tiktok-gg4e.com
    Registered
    2026-08-07 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:35 UTC

    Suggest a correction

  28. gerenzhongxin.casinox-tiktok.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missing
    DetailsHide
    Hostname
    gerenzhongxin.casinox-tiktok.ru
    First seen
    2026-10-29 06:41 UTC
    First published
    2026-10-29 06:44 UTC
    DNS
    Resolves · checked 2026-11-05 06:51 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 186.2.174.131.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 186.2.174.131
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-29 05:39 UTC to 2027-01-27 05:39 UTC
    Logged 2026-10-29 06:37 UTC in Google ParcelYard2027h1, entry 501,148,294
    SHA-256 17c677591e27aef604eba460d0568a5934bd7db50caf5ff86fa6e81cac88c06f
    Public key SHA-256 f43f7e25c1ef5c983ccad079fd3d8175aa1c7314582770e80959f836aec4a7b4
    Brand
    TikTok
    Addresses
    186.2.174.131 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    casinox-tiktok.ru
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  29. www.tiktok-yaxin.com US · AS393437 · KLAYER LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    www.tiktok-yaxin.com
    First seen
    2026-10-29 06:32 UTC
    First published
    2026-10-31 07:18 UTC
    DNS
    Resolves · checked 2026-11-05 07:22 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 72.244.91.252.
    1. Resolved to 72.244.91.252
    2. Phishing-host list fetched with the address
    3. Latest DNS check
    Brand
    TikTok
    Addresses
    72.244.91.252 · United States · AS393437 KLAYER - KLAYER LLC
    Domain
    tiktok-yaxin.com
    Registered
    2026-10-29 · Dominet (HK) Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  30. tiktok-yaxin.com US · AS393437 · KLAYER LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    tiktok-yaxin.com
    First seen
    2026-10-29 06:32 UTC
    First published
    2026-10-31 07:18 UTC
    DNS
    Resolves · checked 2026-11-05 07:22 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 72.244.91.252.
    1. Resolved to 72.244.91.252
    2. Phishing-host list fetched with the address
    3. Latest DNS check
    Brand
    TikTok
    Addresses
    72.244.91.252 · United States · AS393437 KLAYER - KLAYER LLC
    Domain
    tiktok-yaxin.com
    Registered
    2026-10-29 · Dominet (HK) Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  31. portal.casinox-tiktok.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missing
    DetailsHide
    Hostname
    portal.casinox-tiktok.ru
    First seen
    2026-10-26 20:31 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 186.2.174.131.
    1. Phishing-host list fetched with the address
    2. Resolved to 186.2.174.131
    3. Latest DNS check
    Certificate
    Logged in Google ParcelYard2027h1, entry 460,302,087
    SHA-256 62be1d0a0495dd55aa4bf61d1319305fa6ff1c5470a0f4fe5a94f41f920d272e
    Brand
    TikTok
    Addresses
    186.2.174.131 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    casinox-tiktok.ru
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  32. r.mail.tiktok-summit-2026.de FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy none
    DetailsHide
    Hostname
    r.mail.tiktok-summit-2026.de
    First seen
    2026-10-26 17:27 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Resolved to 172.246.243.65
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 458,690,321
    SHA-256 178fe9768af23a4c094b2a1fa64ee085f6b30545a0035e265e4a7d046cea25d1
    Brand
    TikTok
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS
    Domain
    tiktok-summit-2026.de
    MX
    Receives mail at mx00.ionos.fr, mx01.ionos.fr
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 08:22 UTC

    Suggest a correction

  33. tmon.casinox-tiktok.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missing
    DetailsHide
    Hostname
    tmon.casinox-tiktok.ru
    First seen
    2026-10-26 15:11 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 186.2.174.131.
    1. Phishing-host list fetched with the address
    2. Resolved to 186.2.174.131
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 456,990,861
    SHA-256 0c335ed79e3ec96e47de4bd53aa3a1a1bae645ce6e9f4985d332db3e2254fae3
    Brand
    TikTok
    Addresses
    186.2.174.131 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    casinox-tiktok.ru
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  34. secure-login.casinox-tiktok.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missing
    DetailsHide
    Hostname
    secure-login.casinox-tiktok.ru
    First seen
    2026-10-26 15:11 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 186.2.174.131.
    1. Phishing-host list fetched with the address
    2. Resolved to 186.2.174.131
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 456,990,861
    SHA-256 0c335ed79e3ec96e47de4bd53aa3a1a1bae645ce6e9f4985d332db3e2254fae3
    Brand
    TikTok
    Addresses
    186.2.174.131 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    casinox-tiktok.ru
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  35. saml2.casinox-tiktok.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missing
    DetailsHide
    Hostname
    saml2.casinox-tiktok.ru
    First seen
    2026-10-26 15:11 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 186.2.174.131.
    1. Phishing-host list fetched with the address
    2. Resolved to 186.2.174.131
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 456,990,861
    SHA-256 0c335ed79e3ec96e47de4bd53aa3a1a1bae645ce6e9f4985d332db3e2254fae3
    Brand
    TikTok
    Addresses
    186.2.174.131 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    casinox-tiktok.ru
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  36. safelogin.casinox-tiktok.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missing
    DetailsHide
    Hostname
    safelogin.casinox-tiktok.ru
    First seen
    2026-10-26 15:11 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 186.2.174.131.
    1. Phishing-host list fetched with the address
    2. Resolved to 186.2.174.131
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 456,990,861
    SHA-256 0c335ed79e3ec96e47de4bd53aa3a1a1bae645ce6e9f4985d332db3e2254fae3
    Brand
    TikTok
    Addresses
    186.2.174.131 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    casinox-tiktok.ru
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  37. passportpage.casinox-tiktok.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missing
    DetailsHide
    Hostname
    passportpage.casinox-tiktok.ru
    First seen
    2026-10-26 15:11 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 186.2.174.131.
    1. Phishing-host list fetched with the address
    2. Resolved to 186.2.174.131
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 456,990,861
    SHA-256 0c335ed79e3ec96e47de4bd53aa3a1a1bae645ce6e9f4985d332db3e2254fae3
    Brand
    TikTok
    Addresses
    186.2.174.131 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    casinox-tiktok.ru
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  38. passport2.casinox-tiktok.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missing
    DetailsHide
    Hostname
    passport2.casinox-tiktok.ru
    First seen
    2026-10-26 15:11 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 186.2.174.131.
    1. Phishing-host list fetched with the address
    2. Resolved to 186.2.174.131
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 456,990,861
    SHA-256 0c335ed79e3ec96e47de4bd53aa3a1a1bae645ce6e9f4985d332db3e2254fae3
    Brand
    TikTok
    Addresses
    186.2.174.131 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    casinox-tiktok.ru
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  39. old-login.casinox-tiktok.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missing
    DetailsHide
    Hostname
    old-login.casinox-tiktok.ru
    First seen
    2026-10-26 15:11 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 186.2.174.131.
    1. Phishing-host list fetched with the address
    2. Resolved to 186.2.174.131
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 456,990,861
    SHA-256 0c335ed79e3ec96e47de4bd53aa3a1a1bae645ce6e9f4985d332db3e2254fae3
    Brand
    TikTok
    Addresses
    186.2.174.131 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    casinox-tiktok.ru
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  40. ok.casinox-tiktok.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missing
    DetailsHide
    Hostname
    ok.casinox-tiktok.ru
    First seen
    2026-10-26 15:11 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 186.2.174.131.
    1. Phishing-host list fetched with the address
    2. Resolved to 186.2.174.131
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 456,990,861
    SHA-256 0c335ed79e3ec96e47de4bd53aa3a1a1bae645ce6e9f4985d332db3e2254fae3
    Brand
    TikTok
    Addresses
    186.2.174.131 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    casinox-tiktok.ru
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  41. dns.casinox-tiktok.ru AE · AS59692 · IQWEB IQWeb FZ-LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF ~allDMARC missing
    DetailsHide
    Hostname
    dns.casinox-tiktok.ru
    First seen
    2026-10-26 08:56 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 186.2.174.131.
    1. Phishing-host list fetched with the address
    2. Resolved to 186.2.174.131
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Sycamore2027h1, entry 783,674,364
    SHA-256 43a7a15a6db75cc0d544b877ae28ed67833f460a38caba4e511a086fb590e16c
    Brand
    TikTok
    Addresses
    186.2.174.131 · United Arab Emirates · AS59692 IQWEB IQWeb FZ-LLC
    Domain
    casinox-tiktok.ru
    MX
    Publishes no mail exchanger
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  42. www.download-tiktok.ru RU · AS198610 · BEGET-AS Beget LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF all omittedDMARC missing
    DetailsHide
    Hostname
    www.download-tiktok.ru
    First seen
    2026-10-26 08:06 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 87.236.16.13.
    1. Phishing-host list fetched with the address
    2. Resolved to 87.236.16.13
    3. Latest DNS check
    Certificate
    Logged in Geomys Tuscolo2027h1, entry 356,448,651
    SHA-256 b2527e26ce7ddfa6853fa8936d12c25ec22c380ecb293cfebf52cf367a682553
    Brand
    TikTok
    Addresses
    87.236.16.13 · Russia · AS198610 BEGET-AS Beget LLC
    Domain
    download-tiktok.ru
    MX
    Receives mail at mx1.beget.com, mx2.beget.com
    SPF
    SPF record without an "all" mechanism
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

  43. download-tiktok.ru RU · AS198610 · BEGET-AS Beget LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF all omittedDMARC missing
    DetailsHide
    Hostname
    download-tiktok.ru
    First seen
    2026-10-26 08:06 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 87.236.16.13.
    1. Phishing-host list fetched with the address
    2. Resolved to 87.236.16.13
    3. Latest DNS check
    Certificate
    Logged in Geomys Tuscolo2027h1, entry 356,448,651
    SHA-256 b2527e26ce7ddfa6853fa8936d12c25ec22c380ecb293cfebf52cf367a682553
    Brand
    TikTok
    Addresses
    87.236.16.13 · Russia · AS198610 BEGET-AS Beget LLC
    Domain
    download-tiktok.ru
    MX
    Receives mail at mx1.beget.com, mx2.beget.com
    SPF
    SPF record without an "all" mechanism
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches TikTok when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Social media

All brands →