tok[.]alianzati[.]com

The domain tok.alianzati.com was registered on February 21, 2026 through Gname.com Pte. Ltd. and is hosted on the IP address 118.107.44.23, which belongs to AS152194 (CTG Server Limited) in Hong Kong. The domain resolves to this IP and is served by the authoritative nameservers a2.share-dns.com and b2.share-dns.net. No SSL certificate is presented for the site, indicating that any traffic would be unencrypted.

The page title returned from the host is "TikTok Shop," and the campaign is classified as a brand‑impersonation operation targeting the brand "base." VirusTotal analysis shows that 21 of 93 security vendors have flagged the domain as malicious, and the domain appears on a single security blocklist. PhishDestroy has also listed the domain as blocked, and the Gridinsoft trust score is 0 out of 100, reinforcing the malicious assessment. The current operational status is offline, suggesting that the malicious infrastructure has been taken down or is no longer active.

Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑registration attempts, and add the associated IP and nameservers to threat‑intel feeds. Ongoing vigilance is recommended because the lack of SSL and the low trust score indicate a high likelihood of credential‑stealing or fraudulent activity, and the presence of a brand‑impersonation tag suggests targeted social engineering. Incident response teams should also verify that any internal assets have not communicated with the domain while it was active and should update endpoint detection rules to include the observed detection signatures.