tikactiver-org-a254d24c[.]pages[.]dev

This domain is flagged as a phishing site impersonating a TikTok earnings estimator and account scanning service. The page, titled 'TikActiver: TikTok Earnings Estimator and Account Scan,' likely targets users seeking to monetize their TikTok accounts by offering fake analytics or payout estimates. Victims are prompted to enter login credentials, which are then harvested for unauthorized access or resale on underground markets. The threat primarily exploits trust in third-party TikTok tools and the growing demand for social media monetization services. Analysis indicates the domain was registered on April 21, 2026, through Cloudflare, Inc., and currently resolves to the IP address 172.66.46.254. Despite its recent creation, the site has not been widely detected by security vendors, with 0 out of 95 engines flagging it on VirusTotal. It is hosted on Cloudflare’s infrastructure, utilizing HTTP/3 and HSTS, which may lend a false sense of legitimacy. The SSL certificate is issued by Let’s Encrypt, a common practice even among malicious domains. The domain appears on one security blocklist and was previously blocked by at least one anti-phishing service, suggesting prior malicious activity. Users who visited this domain should assume their TikTok credentials or other sensitive information may have been compromised. Immediately change the password for the TikTok account and any other platforms where the same credentials were reused. Enable multi-factor authentication on all accounts to mitigate further risk. Monitor the TikTok account for unauthorized activity, such as unexpected posts, messages, or changes to profile settings. If financial information was entered, contact the relevant institution to report potential fraud. Consider running a full antivirus scan to detect any secondary malware that may have been delivered. Report the domain to TikTok’s security team and relevant cybersecurity organizations to aid in broader threat mitigation efforts.