tiktok-on-desktop[.]skunkradioproductions[.]co[.]uk

PhishDestroy identifies tiktok-on-desktop.skunkradioproductions.co.uk as a live generic phishing domain masquerading as a TikTok desktop client installer. This impostor site leverages brand confusion and social-engineering tactics to harvest TikTok credentials and session tokens from unsuspecting users seeking legitimate desktop software. No documented drainer kit or JavaScript payload has been extracted at this time; the threat appears to rely on URL obfuscation and a convincing SSL certificate to bypass user suspicion. This domain was flagged by PhishDestroy’s automated pipeline on seed 37ae39. Static analysis shows zero detections on VirusTotal out of 95 engines (1/95), no blocklist presence, and a valid Google Trust Services SSL certificate. The domain is registered through Register.com Inc. (Network Solutions) and resolved to IP 216.58.206.83 at the time of capture. The domain was created on March 11, 2011, indicating long-term registration that may be leveraged for trust transference. Google Safe Browsing has not yet flagged the URL, leaving a window of exposure for end users. The investigation is currently under active review by PhishDestroy’s phishing response unit. Defensive actions include DNS sinkholing of 216.58.206.83 and a takedown request lodged with Register.com. The residual risk remains medium pending confirmation of active payloads and broader IOC correlation. Users are advised to avoid the domain entirely, verify download sources directly from tiktok.com, and report any suspicious login prompts to PhishDestroy’s portal for further analysis. Blocking the IP and domain at the network perimeter is strongly recommended to prevent lateral compromise.