dlwaiting-lt.cfd
Appeared in the .cfd zone on Tuesday, October 20, 2026; by the end of that day the census found active website. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
A throwaway .cfd name ('dlwaiting-lt') hosts a generic Bulgarian 'SafeTik' TikTok-parental-safety page with only a name/email form, yet its links point four times to sexytiktokswne.com. That fits a cloaked white-page fronting adult traffic that trades on the TikTok name, not a credential phish of TikTok itself.
The page impersonates TikTok's age-protection information under the 'SafeTik' brand (which does not own TikTok), using Bulgarian language content about TikTok's parental controls to appear legitimate. It contains a form (name, email, checkbox) posting to itself with no legitimate purpose, a classic credential/data-harvesting pattern; the suspicious .cfd domain, Cloudflare infrastructure, and offsite links to sexytiktokswne.com reinforce the phishing intent to deceive parents into submitting pers
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Tuesday, October 20, 2026
Same data as JSON: /api/zone/domain/dlwaiting-lt.cfd. This page is not indexed by search engines and does not link to the site it describes.