kokotv.shop
Appeared in the .shop zone on Thursday, October 29, 2026; by the end of that day the census found active website about crypto web3. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The site uses its own 'Koko TV' monkey branding and does not pose as Netflix or PayPal. It is a WhatsApp-ordered reseller of streaming 'profiles' from other platforms, priced in USDT and Bs with month-to-month renewal, which fits grey-market shared-account resale. Its only form is a giveaway entry collecting name, phone, email and city, not a credential capture, so this is not phishing.
KOKO TV is a fraudulent streaming reseller operating under its own brand (not impersonating Netflix despite the scorer flag). The page collects personal data (name, phone, email, city) via a form that posts to itself, directs all customer contact to WhatsApp only, uses USDT cryptocurrency for payment, promises 'instant delivery' of streaming access, and operates with a Venezuelan phone number—a common pattern for unauthorized account-sharing or credential-theft schemes selling access to legitima
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Thursday, October 29, 2026
Same data as JSON: /api/zone/domain/kokotv.shop. This page is not indexed by search engines and does not link to the site it describes.