tiktok.com

Likely abuse

Brand ImpersonationPhishing & Impersonation

The completed capture reached www.tiktok.com, observed the page title “Couldn’t find this account. Visit TikTok to discover more trending creators, hashtags, and sounds.”, and identified the presented service as TikTok. TikTok has multiple independent indicators supporting likely brand impersonation.

Report to 50+ vendors

Supported findings: 1from 3 artifacts
Capture coverage: Complete capture
The scanner reached the target and captured every planned artifact.
Evidence sources: domainpagescreenshotwhoistlsnetworkcapture
Assessed: Sep 25, 2026, 03:17 AM UTC

Findings

Each finding below is derived from a captured artifact. Expand one to see exactly what it was drawn from.

Analyst summary

Observed 2 capture stage(s); canonical stage is settled_render.
POST targets observed during capture: https://www.tiktok.com/tiktok/pns/privacy_headers?aid=1233, https://mcs-ttp2.tiktokv.us/v1/list, https://mcs.tiktokw.us/v1/user/webid.
Distinctive asset clues: index.js, user-prefetch.e4a973fd.js, high-contrast.0f0f0b81.css, index.b5f3c689.css.

Supported findings1

Brand impersonation of ATO
Brand Impersonation
www.tiktok.com is not the official ATO domain, while the captured page presents ATO branding.
deterministic correlation

Capture signals

Forms: 1
Password fields: 0
Resources: 274
Distinct hosts: 11

Threat-KB / IOK matches0

Not evaluated

No known kit signatures matched this capture.