Highscore 46 · flagged Monday, August 31, 2026

cikl.top

Appeared in the .top zone on Monday, August 31, 2026; by the end of that day the census found redirects elsewhere. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: top
+8
brand in page title, not in the name
matched: amazon
+20
form on a brand-styled page
matched: has_form
+18
Registrar
Dynadot LLC
Nameserver provider
Nameservers
ns1.dyna-ns.net, ns2.dyna-ns.net
First-day state
redirects elsewhere
HTTP status
200
Page title
Amazon.com. Spend less. Smile more.
Has a form
yes
Brand echoed

Model opinions

Second opinionlooks benignconfidence 68%· claude-opus-5

cikl.top contains no brand string and serves no content of its own — it simply 302s to the genuine www.amazon.com, so the Amazon title, forms and links in the evidence belong to Amazon's real homepage, not to this domain. This is the shape of an affiliate/link-cloaking or placeholder redirect rather than impersonation; no credential capture occurs under the cikl.top name.

First passlooks like abusetarget: Amazonconfidence 92%· claude-haiku-4-5

The domain cikl.top is a brand-squat that redirects to Amazon's legitimate site. The name contains no meaningful relationship to the redirect target, the nameservers are generic (dyna-ns.net), and the sole purpose appears to be capturing traffic via the Amazon brand association embedded in the domain itself — a classic typosquat/redirect-squat pattern used for affiliate commission, SEO manipulation, or traffic monetization rather than direct phishing.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Monday, August 31, 2026

Screenshot of cikl.top taken by the zone census on 2026-08-31

Same data as JSON: /api/zone/domain/cikl.top. This page is not indexed by search engines and does not link to the site it describes.