tiktoksecurity.github.io
Categoria: Information Technology, Phishing
Para usar o produto com todas as funcionalidades, tem de adquirir uma licença do Combo Cleaner. Está disponível um teste gratuito limitado de sete dias. O Combo Cleaner é propriedade e operado pela RCS LT, a empresa-mãe do PCRisk.com.
Descrição de tiktoksecurity.github.io
This domain appears to be a GitHub Pages site hosted under the github.io platform rather than an official TikTok-owned web property. Based on the page title, metadata, and screenshot, it presents itself as a TikTok login page and imitates the look and branding of TikTok's account sign-in interface.
The naming pattern "tiktoksecurity.github.io" may suggest a security-related page, but the visible content does not appear to provide security information or support resources. Instead, it shows a credential-entry form for email/username and password, which is more consistent with an account login portal than with a documentation or help page.
Because the site is hosted on a user-content platform and uses TikTok branding on a non-official domain, it appears likely to be designed to capture user credentials or otherwise impersonate the TikTok service. Based on the available categories and page content, the most fitting classification is phishing.
Avaliação de segurança de tiktoksecurity.github.io
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 17 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. The screenshot and metadata also show a login page branded as TikTok, but it is served from a github.io subdomain rather than an official TikTok domain, which may indicate an attempt to imitate the service and collect account credentials.
The malware scan did not detect malicious files in the limited page sample that was checked, and major content-malware blacklist results shown here were otherwise clean at the time of scanning. However, that does not outweigh the stronger phishing indicators from the multi-engine consensus and the visible impersonation pattern. In addition, the domain's IP address is listed on one mail-reputation blocklist, which is a minor cautionary signal but not the main reason for concern here.
Taken together, the strongest indicators are the non-official hosting location, the TikTok-branded login form, and the relatively broad phishing consensus among security engines. Based on these findings, this website may pose potential risks to visitors.
Descrição técnica
The site is hosted on GitHub Pages infrastructure and resolves to IP address 185.199.109.153, with a valid Let's Encrypt SSL certificate reported at the time of the scan. HTTPS availability may help encrypt traffic in transit, but it does not by itself verify that the page is legitimate or affiliated with the brand it displays.
The domain has existed for many years and is registered through MarkMonitor, with DNSSEC reported as unsigned. The server appears to be standard GitHub web hosting rather than dedicated TikTok infrastructure. No malicious files or iframes were detected in the limited scan results provided, but the primary technical concern is the apparent brand impersonation on a third-party hosting platform.
Partilhe a sua experiência com este website. Era seguro? Encontrou algum problema?