tiktokhkg[.]cc

Analysis of tiktokhkg.cc, first observed on June 26, 2026, shows a high‑risk phishing infrastructure that remains active despite mitigation attempts. The domain was registered through Spaceship, Inc. and is serviced by Cloudflare nameservers becky.ns.cloudflare.com and conrad.ns.cloudflare.com, indicating use of a reputable DNS provider to obscure origin. DNS resolution points to IP address 118.107.59.195, an address currently associated with malicious activity in multiple threat feeds.

VirusTotal scans have flagged the domain on six of ninety‑one engines, confirming that automated detection systems recognize it as malicious. The domain appears on at least one security blocklist and has been explicitly blocked by the PhishDestroy community filter, yet it continues to resolve and host content, suggesting that blocklist propagation may be incomplete or that the site is employing evasion techniques. The limited publicly available metadata does not include a page title, SSL certificate details, or HTTP response codes, leaving the exact content and hosting characteristics unverified.

Defenders should treat tiktokhkg.cc as a confirmed phishing vector targeting users of the TikTok platform, enforce network‑level blocking of the domain and its resolving IP, and monitor for any related indicator updates from threat‑intel sources. Continuous re‑scanning with multi‑engine services and inclusion of the domain in internal blocklists are recommended to mitigate exposure while additional forensic analysis is pursued.