Is www.tiktok.com a scam?

Our automated security review found no threat indicators on www.tiktok.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.

Is www.tiktok.com safe to use?

www.tiktok.com passed our automated security checks with a trust score of 90/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.

Does www.tiktok.com have a valid SSL certificate?

Yes. www.tiktok.com presents a valid TLSv1.3 certificate issued by DigiCert Inc · RapidSSL TLS ECC CA G1, expiring in 103 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

How old is the www.tiktok.com domain?

www.tiktok.com is 30.0 years old, registered on 7/21/1996 through Gandi SAS. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.

Has www.tiktok.com been flagged by antivirus engines?

No. All 92 antivirus engines in our malware network report www.tiktok.com as clean.

Is www.tiktok.com on any phishing or malware blacklists?

No. www.tiktok.com is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is www.tiktok.com hosted?

www.tiktok.com resolves to an IP operated by Akamai Technologies, Inc. in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the www.tiktok.com report updated?

This is a permanent record of the scan run on July 1, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around www.tiktok.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Security Review

Is www.tiktok.com legit or a scam?

Our verdict:Safe· 90/100

SafeSuspiciousDangerous

Official TikTok domain hosting a legitimate but expired referral invitation link with no signs of malicious activity.

Why we trust it

Domain is over 29 years old and is a top-tier global website.Zero detections across 92 antivirus engines in our network.Valid SSL certificate issued by a trusted authority.

www.tiktok.comScanned 1h ago

Post Facebook

Trust score

SAFE

Heuristics 86·MT 92

Positive signals (5)

Antivirus clear Not on major blacklists Domain is 30 years old Encrypted connection Clean server reputation

View density

Analysis Summary

Threat Intelligence

0/92

All engines report clean

Domain Age

30 years old

Registered Jul 21, 1996

MT Intelligence

Safe

Low likelihood · 95% confidence

SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Website Preview

LIVE RENDER

www.tiktok.com

1Page renders a message in Portuguese stating an invitation has expired

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

/ 100

High visual risk

Visual red flags detected in the screenshot

The page displays a simple expiration message and a call to action for a legitimate app, with no immediate visual indicators of a scam.

Visual risk50/100

What our vision model saw

2 signals

Page renders a message in Portuguese stating an invitation has expired

A button at the bottom prompts the user to download TikTok Lite

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Low scam likelihoodengineMT · Guardiantrust92/100

MT AgentLive web researchVisual inspection

Confidence

The domain has been registered for over 29 years and is the verified home of the global TikTok platform. Our antivirus network and major browser blocklists show no security threats for this URL. While the specific page content appears minimal, our analysis confirms it is a JavaScript-based referral link intended for the Brazilian market. The visual findings show a standard 'invitation expired' message rather than a phishing attempt. High traffic rankings and valid SSL certificates from a reputable issuer further confirm the site's authenticity.

Full dossier

Analysis complete

Page Content

The page serves as a mobile referral gateway for the TikTok app. It contains metadata for a 'push coin' referral campaign in the Brazilian region, though the visual interface indicates the specific activity has ended.

Infrastructure

The site is hosted on TikTok's official content delivery network (CDN) and uses high-grade ECC encryption. The technical stack is consistent with a large-scale social media platform, utilizing specialized subdomains for login and static assets.

Domain History

Registered in 1996, the domain is one of the most established on the internet. It is owned by TikTok Ltd and managed through a professional registrar, with a history that predates modern social media.

Web Reputation

While the platform faces numerous consumer complaints regarding its 'TikTok Shop' feature and customer service on independent review sites, the domain itself is not a scam. It is a legitimate global business, though users should exercise caution with individual third-party sellers on its marketplace.

Risk Factors

High volume of consumer complaints on independent review sites regarding the platform's marketplace (TikTok Shop).
The page is a referral link which can sometimes be used by users to spread spam, though the domain itself is safe.

Positive Signals

Domain is over 29 years old and is a top-tier global website.
Zero detections across 92 antivirus engines in our network.
Valid SSL certificate issued by a trusted authority.
Official business registration and physical headquarters are well-documented.

AI Recommendation

You can safely browse this site. If you intended to join a referral program, the link has simply expired and is no longer active.

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for www.tiktok.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age

29 yrs

Registered Jul 1996

Business registration

Active · Cayman Islands (TikTok Ltd. / ByteDance Ltd.) with US operat

Site traces back to an actively registered business.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

3 scam reports · 2669 complaints

Key findings

7 headline facts from open-web research

Domain tiktok.com created July 21, 1996 (over 29 years old), registered to TikTok Ltd via Gandi SAS registrar (WHOIS data from who.is, ip2whois.com).
Official TikTok pages extensively document and warn against scams, phishing, impersonation, romance scams, and fraudulent apps mimicking TikTok/TikTok Shop (tiktok.com/safety/en/community-support/scams, support.tiktok.com).
BBB profile for TikTok shows F rating due to failure to respond to thousands of complaints (over 2,600 in 3 years, many related to refunds, shopping, advertising); not BBB accredited.
Trustpilot page for tiktok.com exists; shop.tiktok.com has very low 1.2/5 score from hundreds of reviews citing poor customer service, defective products, and refund issues.
TikTok Ltd is a Cayman Islands incorporated entity, subsidiary of ByteDance Ltd (also Cayman Islands incorporated, founded by Chinese entrepreneurs, HQ in Beijing). US entity TikTok Inc. based in Culver City, CA.
No evidence that www.tiktok.com itself is a scam site; it is the legitimate home of the popular short-video platform. Scams occur *on* the platform (e.g. fake sellers, crypto investment schemes promoted via videos).
TikTok provides official reporting tools for scams, phishing, and transaction issues (support.tiktok.com, tiktok.com/legal/report).

Scam reports (3)

Direct quotes from public scam databases, forums, and news.

BBB.orgopen
"TikTok is NOT a BBB Accredited Business. ... Failure to respond to 1,738 complaint(s) filed against business * 132 complaint(s) filed against business that were not resolved"
BBB.orgopen
"2,669 total complaints in the last 3 years. * 1,346 complaints closed in the last 12 months."
Trustpilotopen
"shop.tiktok.com has a TrustScore of 1.2/5 based on 553 reviews. Many customers reported receiving incorrect or defective products..."

Business registration

Status: active · Cayman Islands (TikTok Ltd. / ByteDance Ltd.) with US operat

Domain registered 1996 to TikTok Ltd (via WHOIS). Parent ByteDance Ltd incorporated in Cayman Islands, operational HQ in Beijing, China. TikTok Inc. / LLC in US (Delaware/California).

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

We found thousands of complaints on consumer-review sites like the BBB and an independent review aggregator, mostly centered on TikTok Shop transactions and refund delays. However, our research confirms this is the official, long-established domain for the TikTok platform. The site provides extensive official documentation and tools to help users report actual scams that occur within the app.

Antivirus Engines

Clean pass · verified

Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious59Harmless92Engines

Clean

Kaspersky

Clean

Bitdefender

Clean

Microsoft

Not in pass

ESET-NOD32

Not in pass

Avira

Not in pass

Sophos

Clean

Fortinet

Clean

Google Safebrowsing

Clean

Emsisoft

Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbers1782696011776

Postal addressNot listed

Linked social profiles0

Signal Summary

Several contact red flags

No contact email found anywhere on the page.
No postal address visible on the page.

Phone number listed (1782696011776).

Domain & Encryption

Domain History

Age30 years old

RegistrarGandi SAS

RegisteredJul 21, 1996

ExpiresJul 20, 2027

Owner privacyVisible

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerDigiCert Inc · RapidSSL TLS ECC CA G1

ExpiresOct 12, 2026 (103d)

Self-signedNo

Hosting & Technology

HostingAkamai Technologies, Inc.

Server locationUS

Web servernginx

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1302https://www.tiktok.com/d/4/ZS96Hcjwem4v9-EvDZm/
2200https://www.tiktok.com/ug/incentive/share/push_coin?__status_bar=true&_d=f1k2j564j67bki&_pia_=1&_svg=1&aid=1340&checksum=381e6b4e031f47ee7aa945ce799e88852fe978677a47f1324ecde3ae2cfb1f1f&enable_canvas=1&enable_canvas_optimize=1&gameplay=push_coin&gd_label=click_wap_referral_push_coin&hide_nav_bar=1&inc_pid=referral_onelink_push_coin&inc_target_url=aweme%3A%2F%2Froma_redirect%2F%3Fspark_page%3Dpush_coin_page%26enter_from%3Dcoin_pusher_onelink_jump&lang=pt&media_source=referral_onelink_push_coin&og_image=https%3A%2F%2Fp16-ug-incentive-va.tiktokcdn.com%2Ftos-maliva-i-68e3t9dfc1-us%2F0e96f82a2dd4491fb0677a51f6bf0359.png~tplv-68e3t9dfc1-image.image&region=br&sec_user_id=MS4wLjABAAAA5NRWpZEWKDnh6vg_ocUGktxZnlUV4C5qyq-eTTE_iFGlY7Dg3WDLWQa_E1KycrQr&share_app_id=1340&share_app_id=1340&share_enter_from=push_coin_promotion&share_link_id=21aff72c-09db-4891-b06a-e342099ed201&share_page_data=MIH4BAw8IqqeWg1dk%2BB7cAMEgdVFUH%2BF6G7xL28h8byEsTSbuY%2FuOwNiHXDfGrhoq3N57g%2Bjxi%2BD1OefBmG64WcTUXaqatftjdgkO4%2BiYqz7iKZKwyPDlD1PhkHvuoEzKdHOEbt2IaYi9%2FEWWtlyhQp8a004GeIW4SHwewMC9Mykv8MQRVkKNnU5w%2FGQgbfvScmAmheYgzV2Ke9ydeAiPzGn3w0Z%2BJ2iwvP%2Buuch0NOFZXbmkRLqeHT8dypejUlz9MNxRCdYJpt4unqgQKhIb9DUvl7NlfQKRUKNXMvbBjmjiigC0VY1JfoEEPUJRKPeqAGFl0uMs%2F%2Bwues%3D&share_position=invite_panel&share_region=BR&share_scene=10003&share_time=1782696011776&share_type=link&sharer_biz=ug_paid_acquisition&sharer_os=android&should_full_screen=1&timestamp=1782696012&ug_launch_category=referral&ugbiz_name=Unknown&use_new_link_policy=1&user_id=6928888279307797510&utm_campaign=client_share&utm_source=copy

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPAkamai Technologies, Inc.

Usage typeData Center/Web Hosting/Transit

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

Double-check the exact URL in your address bar
Confirm you are actually on www.tiktok.com and not a lookalike like w-ww.tiktok.com.com or an IDN homoglyph.
Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
Discuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

sf16-website-login.neutral.ttwstatic.com lf16-tiktok-web.tiktokcdn-us.com lf16-cdn-tos.tiktokcdn-us.com

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review found no threat indicators on www.tiktok.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
www.tiktok.com passed our automated security checks with a trust score of 90/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
Yes. www.tiktok.com presents a valid TLSv1.3 certificate issued by DigiCert Inc · RapidSSL TLS ECC CA G1, expiring in 103 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
www.tiktok.com is 30.0 years old, registered on 7/21/1996 through Gandi SAS. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
No. All 92 antivirus engines in our malware network report www.tiktok.com as clean.
No. www.tiktok.com is not currently listed on the major browser blocklist feeds that modern browsers use.
www.tiktok.com resolves to an IP operated by Akamai Technologies, Inc. in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on July 1, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around www.tiktok.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

Trust / 100

Final Verdict·www.tiktok.com

SAFE

This is a legitimate link to the official TikTok platform. The page is a referral or invitation link that has expired, which is why it shows a simple message in Portuguese. You can safely interact with the site or download the official app from verified stores.

You can safely browse this site. If you intended to join a referral program, the link has simply expired and is no longer active.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Safe reports

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.