tiktok[.]tnzmedia[.]com

This domain, tiktok.tnzmedia.com, is identified as a credential harvesting phishing site targeting users of the TikTok platform. The domain was designed to deceive visitors into entering login credentials or personal information by presenting a fraudulent interface resembling the legitimate TikTok service. Analysis indicates the site was operational until recently, despite lacking basic security measures such as an SSL certificate, increasing the risk of data interception during transmission. Infrastructure analysis reveals the domain was registered on February 23, 2026, through NameCheap, Inc., and resolved to the IP address 103.221.220.28, hosted under AS63760 (AZDIGI Corporation) in Vietnam. The domain appears on one security blocklist and was flagged by 20 out of 95 security vendors on VirusTotal, indicating moderate but consistent detection across threat intelligence platforms. The page title, 'TIKTOK,' further suggests an intent to impersonate the official service, a common tactic in credential harvesting campaigns. Users who visited tiktok.tnzmedia.com or entered credentials on the site should immediately change their TikTok passwords and enable multi-factor authentication if not already active. Monitor accounts for unauthorized activity, such as unexpected logins or content modifications. If financial or personally identifiable information was submitted, consider reporting the incident to relevant authorities and monitoring for signs of identity theft. Organizations should update internal blocklists to include this domain and its associated IP address to prevent future access attempts.