Criticalscore 62 · flagged Saturday, October 17, 2026

keoxhtiktok.click

Appeared in the .click zone on Saturday, October 17, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: tiktok
+30
TLD with a high abuse rate
matched: click
+8
brand name on a rarely-seen nameserver
matched: vclouddns.vn
+6
form on a brand-styled page
matched: has_form
+18
Registrar
—
Nameserver provider
Nameservers
ns1.vclouddns.vn, ns2.vclouddns.vn
First-day state
active website
HTTP status
200
Page title
keoxhtiktok.click
Has a form
yes
Brand echoed
tiktok

Model opinions

Second opinionlooks like abusetarget: TikTokconfidence 66%· claude-opus-5-5

The name embeds the TikTok brand ('keoxh tiktok', likely Vietnamese for 'pull TikTok trends', a follower/engagement-boost lure) on a .click TLD with Vietnamese nameservers. The page is a generic interior-design template with the domain dropped in as the studio name. Nothing relates to TikTok and only a name/phone lead form is present, so this is a brand-squat behind a filler cover page rather than an active phish.

First passlooks benignconfidence 71%· typesafe/jev-latest

typesafe first pass (gate 0.4): p=benign:0.76 suspicious:0.13 abuse:0.08 | impersonates=0.30 credential=0.90 parked=0.06 evidence=1.6 | target=tiktok:0.79

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Saturday, October 17, 2026

Screenshot of keoxhtiktok.click taken by the zone census on 2026-10-17

Same data as JSON: /api/zone/domain/keoxhtiktok.click. This page is not indexed by search engines and does not link to the site it describes.