Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from trusted issuer

Established domain (2+ years old)

Strong email security (SPF, DKIM, DMARC)

Has privacy policy and cookie compliance

Fast loading times

Contact information available

Negative Signals

Found on 1 security blacklist(s)

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

100/100

✓ Valid SSL (40) ✓ HSTS (20) ✓ CSP (20) ✓ X-Frame (20)

SSL Certificate

Issuer

DigiCert Inc

Valid From

Jun 16, 2025

Valid Until

Jun 15, 2026

197 days remaining

Security Headers

HSTS

CSP

X-Frame-Options

Domain & WHOIS Information

Domain Age

29 years 4 months

Registered Jul 21, 1996

Very High Trust

Jul 1996 Expires Jul 2026

Established domain (5+ years) - High trust indicator

Registrar

Gandi SAS

Registration Date

Jul 21, 1996 (29 years ago)

Last Updated

May 13, 2025

Expiration Date

Jul 20, 2026 (0 days remaining)

Server Location

France

Abuse Contact

N/A

   Domain Name: TIKTOK.COM
   Registry Domain ID: 1046418_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.gandi.net
   Registrar URL: http://www.gandi.net
   Updated Date: 2025-05-13T03:58:49Z
   Creation Date: 1996-07-21T04:00:00Z
   Registry Expiry Date: 2026-07-20T04:00:00Z
   Registrar: Gandi SAS
   Registrar IANA ID: 81
   Registrar Abuse Contact Email: [email protected]
   Registrar Abuse Contact Phone: +33.170377661
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Name Server: A1-97.AKAM.NET
   Name Server: A12-66.AKAM.NET
   Name Server: A13-67.AKAM.NET
   Name Server: A18-64.AKAM.NET
   Name Server: A6-65.AKAM.NET
   Name Server: A9-66.AKAM.NET
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2025-11-10T21:41:09Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

8

A

3

MX

23

TXT

6

NS

                                                            96.16.248.166
                                                        

                                                            96.16.248.181
                                                        

                                                            96.16.248.180
                                                        

                                                            96.16.248.177
                                                        

                                                            96.16.248.138
                                                        

                                                            96.16.248.169
                                                        

                                                            96.16.248.171
                                                        

                                                            96.16.248.173
                                                        

10

                                                            mx1.tiktok.com
                                                        

20

                                                            mx2.tiktok.com
                                                        

30

                                                            mx3.tiktok.com
                                                        

                                                            klaviyo-site-verification=STK9xy
                                                        

                                                            verification-code-site-edm-va=GkLVdrouyEyNQGsN0X0W
                                                        

                                                            google-site-verification=heUwjUSZGdrUk6gp54Bxe8zNWMepAUdI3eECZ7zzNuQ
                                                        

                                                            google-site-verification=StaGWBpu1eRwm0dUSA-24OmzeXAqkQitecePeqLQ0fc
                                                        

                                                            google-site-verification=spKY3sgLfx2ShlMQbs-jaGpfyhukOMBQ9fV_cR8yKII
                                                        

                                                            apple-domain-verification=hXgMRIDdysM4HJYw
                                                        

                                                            _f3zsp3jcr9843f36xnpbfib409nlhjt
                                                        

                                                            google-site-verification=UlwaFhsh7mBJzb0eTyZBibPg6HQ6doHO8-_tkmjBo4E
                                                        

                                                            _hvpbov9c2s6s8d9hj5w2njkjbpj35op
                                                        

                                                            _globalsign-domain-verification=FUJcu1hWja0wxluxlVKRWITCKMvR1CzjjxYcugM_gM
                                                        

                                                            google-site-verification=9aMOY6RF3QT8X2ACpo04BZ4CSdjPWxRJgncABZtHRYY
                                                        

                                                            google-site-verification=ot5hoJ0_9g-FO6j5YX6aoLZpNM7N0y988ua0zsCDr88
                                                        

                                                            google-site-verification=-pibSb_VhK-cZP1CQSaH7s43WbBkpzjhUwAgyc3YDH4
                                                        

                                                            MS=ms80039204
                                                        

                                                            facebook-domain-verification=iec6txjjw8r35xhq5swdem8tpa5mzw
                                                        

                                                            MS=ms14857357
                                                        

                                                            v=spf1 include:_spf.google.com include:mail.zendesk.com include:spf.bytedance.com include:mail.stibee.com -all
                                                        

SPF

                                                            pinterest-site-verification=7d9fc044e28c4992dffda772e8ca2bdc
                                                        

                                                            facebook-domain-verification=wo9l655kzm8rfqm1st3qe7gqduoqav
                                                        

                                                            google-site-verification=6qNNoqXIzco_ObM8QE5IZfz2kLnLQkG-llKLL_HudVI
                                                        

                                                            google-site-verification=2ZTMDlDhN4fD3hIKVj_1LnDKhTvf4NVhT23o-edCEVw
                                                        

                                                            hubspot-developer-verification=YzdjZDc2ZDEtMDRmNS00MWQyLWJlNzUtY2Q4YmQyN2E0NDFl
                                                        

                                                            mailru-verification: c0f4705a229bd0c6
                                                        

                                                            a9-66.akam.net
                                                        

                                                            a1-97.akam.net
                                                        

                                                            a18-64.akam.net
                                                        

                                                            a12-66.akam.net
                                                        

                                                            a6-65.akam.net
                                                        

                                                            a13-67.akam.net
                                                        

HTTP Headers

Key server response headers for security analysis.

Security (6)

Referrer Policy

HSTS

MIME Sniffing Protection

Clickjacking Protection

XSS Filter

Content Security Policy

Web Server

                                            nginx
                                        

Technology

                                            Goofy Node
                                        

Cache Policy

                                            max-age=0, no-cache,...
                                        

Cache Status

                                            TCP_MISS from a2-16-...
                                        

{
    "server": "nginx",
    "content-length": "24",
    "location": "\/explore",
    "expires": "Mon, 10 Nov 2025 21:41:25 GMT",
    "cache-control": "max-age=0, no-cache, no-store",
    "pragma": "no-cache",
    "date": "Mon, 10 Nov 2025 21:41:25 GMT",
    "x-cache": "TCP_MISS from a2-16-173-106.deploy.akamaitechnologies.com (AkamaiGHost\/22.3.1-beec7c8e6b19d04c9cf512962152fd16) (-)",
    "x-tt-trace-tag": "id=16;cdn-cache=miss;type=dyn",
    "server-timing": "cdn-cache; desc=MISS, edge; dur=3, origin; dur=211",
    "x-akamai-request-id": "36cf740f",
    "content-type": "text\/html; charset=utf-8",
    "feature-policy": "microphone 'none'; geolocation 'none'",
    "referrer-policy": "strict-origin-when-cross-origin",
    "strict-transport-security": "max-age=31536000; includeSubdomains",
    "x-bytefaas-execution-duration": "90.71",
    "x-bytefaas-request-id": "20251110214125B204AC4BAAAC8973F9C8",
    "x-content-type-options": "nosniff",
    "x-download-options": "noopen",
    "x-frame-options": "SAMEORIGIN",
    "x-gw-dst-psm": "serverless.tiktok.desktop",
    "x-powered-by": "Goofy Node",
    "x-tt-logid": "20251110214125B204AC4BAAAC8973F9C8",
    "x-xss-protection": "1; mode=block",
    "access-control-expose-headers": "x-tt-traceflag,x-tt-logid",
    "x-tt-trace-host": "016892dc5e22c414d5b63b7d2fe8ed7b0323474aad94677517972debfe8184fbe3cbaf9027d40ac4cfd66dadb4b0670ce284ea16eb247841cef8b948c5fb02578ec985949820492b9613e0a962c6e52adf98cc053d2bc38dc3ac0f1e7278370d216a399a56b6d79f34b88048ade8f9adf5d2be759d881b9d86f40ca141cd61ad08",
    "x-tt-trace-id": "00-251110214125B204AC4BAAAC8973F9C8-0E5DD07103FE5354-00",
    "reporting-endpoints": "csp-endpoint=\"https:\/\/mon-i18n.tiktokv.com\/monitor_browser\/collect\/batch\/security\/?bid=tiktok_pns\"",
    "content-security-policy": "report-uri https:\/\/mon-i18n.tiktokv.com\/monitor_browser\/collect\/batch\/security\/?bid=tiktok_pns&ev_type=csp&p=Bft85SohKpT3hn5_VgkV2&v=33; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com\/musickit\/v3\/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com\/obj\/static-tx\/bric-captcha\/core-captcha\/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss:\/\/*.tiktok.com wss:\/\/*.tiktokv.com wss:\/\/*.tiktokv.eu wss:\/\/tiktok.com wss:\/\/tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com vimeo.com web-app.goidentitas.id; worker-src www.tiktok.com\/business\/sw.js www.tiktok.com\/creator\/worker\/ www.tiktok.com\/embed\/sw.js www.tiktok.com\/firebase-messaging-sw.js www.tiktok.com\/help\/sw.js www.tiktok.com\/legal\/report\/verification\/uploader-oversea-crc32.js www.tiktok.com\/live\/creator-networks\/pdf.worker.min.js www.tiktok.com\/live\/static\/player-worker\/ www.tiktok.com\/risk-appeal-ocr\/BlinkCardWasmSDK.worker.min.js www.tiktok.com\/series\/worker\/ www.tiktok.com\/sw.js www.tiktok.com\/tiktokstudio\/static\/worker\/ www.tiktok.com\/tiktokstudio\/sw.js www.tiktok.com\/web-static-js\/ www.tiktok.com\/webapp-desktop\/static\/worker\/; report-to csp-endpoint; upgrade-insecure-requests",
    "content-security-policy-report-only": "connect-src 'self' blob: bytedance: data: wss:\/\/*.tiktokv.com wss:\/\/*.tiktokv.eu *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokstaticb.com *.tiktokus.info *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com vimeo.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com\/musickit\/v3\/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com\/obj\/static-tx\/bric-captcha\/core-captcha\/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com; worker-src https:; report-to csp-endpoint; report-uri https:\/\/mon-i18n.tiktokv.com\/monitor_browser\/collect\/batch\/security\/?bid=tiktok_pns&ev_type=csp&p=Bft85SohKpT3hn5_VgkV2&v=32",
    "set-cookie": "tt_chain_token=EEE7fXeiQYJBRCbU2k9GSA==; path=\/; expires=Sat, 09 May 2026 21:41:25 GMT; domain=.tiktok.com; secure; httponly",
    "x-origin-response-time": "211,2.16.173.106",
    "x-pumbaa-web-avail": "1",
    "content-encoding": "gzip",
    "vary": "Accept-Encoding"
}

IP Geolocation

Server location and network information

France

Aubervilliers

IP Address

96.16.248.165

ISP / Hosting

Akamai International B.V.

Coordinates

48.9163, 2.3869

Country Code

FR

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 include:_spf.google.com include:mail.zendesk.com incl...

DKIM

Configured

DMARC

v=DMARC1; p=reject; pct=100;

Performance Metrics

Website loading speed and performance analysis

85

Average

Load Time

0.79s

Excellent

Page Size

0.28MB

Optimized

Requests

140

Many

Overall

85/100

Performance score

Good performance, but there's room for optimization to improve loading speed.

Blacklist Check

Checking if this domain is listed on major security blacklists.

Google Safe Browsing

Safe

Spamhaus DBL

Blacklisted

SURBL

Safe

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.tiktok.com

smtp.tiktok.com

imap.tiktok.com

shop.tiktok.com

api.tiktok.com

dev.tiktok.com

test.tiktok.com

media.tiktok.com

m.tiktok.com

support.tiktok.com

Privacy & Trackers

0 Trackers Found

Privacy Policy

Website Screenshot

In-Depth Analysis

Overview

TikTok.com, titled "TikTok - Make Your Day," is a popular social media platform primarily known for short-form video sharing. It leverages technologies like Shopify and React for its functionality, including payment processing.

Security Assessment

TikTok.com possesses a valid SSL certificate issued by DigiCert, expiring in 2026, ensuring encrypted communication. The domain has a substantial age of 29 years, generally a positive indicator. However, a CRITICAL SECURITY CONCERN arises from its BLACKLISTED status on Spamhaus DBL. This indicates a high probability of malicious activity such as malware distribution, phishing attempts, or spam campaigns originating from or associated with the domain. While Google Safe Browsing and SURBL show a clean status, the Spamhaus DBL listing is a significant red flag that cannot be ignored.

Trust Level

Despite a FlareScore of 85/100, which suggests a relatively safe website, the Spamhaus DBL blacklist status severely compromises the trust level. Users should exercise extreme caution due to the potential security risks.

Recommendations

Be extremely cautious: Given the Spamhaus DBL listing, users should be very wary of clicking links from or associated with TikTok.com.
Verify information: Independently verify any information or offers presented on the site through reputable sources.
Use strong passwords: If using the platform, ensure a strong

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

Sign In Create Account

No reviews yet.

Analysis for

tiktok.com

FlareAI™ Summary