tiktok[.]tkonb[.]com

tiktok.tkonb.com is flagged as a brand‑impersonation site targeting the TikTok brand. The domain was registered through Dynadot LLC on 19 July 2019 and uses the authoritative name servers ns1.dyna‑ns.net and ns2.dyna‑ns.net. DNS resolution points to 118.107.44.21, an address allocated to CTG Server Limited in Hong Kong (ASN 152194). No TLS certificate is presented; HTTP requests return a 200 status code, and the page title is reported as “TikTok Shop,” indicating a likely attempt to lure users into a counterfeit TikTok‑related shopping experience. VirusTotal has recorded 15 positive detections out of 95 scanned engines, and the domain is listed on a single external blocklist.

PhishDestroy has already added the domain to its blocklist, confirming its active status. The Gridinsoft trust score of 0 / 100 further reinforces the malicious nature of the host. Although the full page content has not been captured, the available data align with a classic social‑media phishing kit that harvests credentials or payment information under the guise of a TikTok storefront. Defenders should immediately block traffic to 118.107.44.21 and to the host name tiktok.tkonb.com at the DNS, firewall, and proxy layers.

Security appliances should be updated to include the domain in URL‑filtering and email‑security policies. Continuous monitoring of any new DNS records or changes in the hosting infrastructure is advised, as threat actors often pivot to adjacent IP ranges. Incident response teams encountering user reports of TikTok‑related login prompts should verify the URL against the known domain and advise affected users to change credentials on the legitimate TikTok platform. Overall, the combination of registrar data, lack of encryption, positive vendor detections, and low trust scoring confirms a high‑risk, active brand‑impersonation operation.