tiktok-uzbekcha[.]pro

Analysis of the domain tiktok-uzbekcha.pro, created on March 03, 2026, shows a clear pattern of brand impersonation targeting TikTok users. The site was blocked by PhishDestroy and is currently offline, indicating that the malicious infrastructure has been taken down or is no longer serving content. The page title "TikTok 18+ — O‘rnatish" aligns with the reported scam type of Social Media Phishing, suggesting an attempt to lure victims into downloading or installing unauthorized software. Registrant information points to NiceNIC International Group Co., Limited as the registrar, while the authoritative nameservers grant.ns.cloudflare.com and kallie.ns.cloudflare.com resolve the domain to IP address 104.21.2.125, an address owned by Cloudflare, Inc. (AS13335) located in the United States.

No SSL certificate was observed, meaning the site operated without HTTPS encryption, a common trait of low‑cost phishing deployments. The Gridinsoft trust score of 0 out of 100 reflects an extremely poor reputation, and the domain appears on a single security blocklist. VirusTotal analysis recorded seven detections out of ninety‑four scanners, confirming that multiple security vendors have identified the domain as malicious.

While the exact content of the page has not been captured, the combination of brand impersonation, low trust rating, and vendor detections provides sufficient confidence to classify the domain as a high‑risk phishing vector. Defenders should continue to block the domain at network perimeter devices, update URL filtering lists, and monitor for any re‑registration attempts that reuse similar naming patterns or hosting configurations. Ongoing observation of the associated IP range and Cloudflare nameservers is advised to detect potential resurgence of related threats.