roifortiktok.site
Appeared in the .site zone on Thursday, October 22, 2026; by the end of that day the census found active website. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The page is not a TikTok credential phish: it asks only for a TikTok Pixel ID and fires fake conversion events (AddPaymentInfo, CompletePayment, etc.) 'with your IP and User-Agent, as from a live visitor', which is an ad-pixel manipulation tool. It sits under a name built on the TikTok brand it does not belong to and funnels visitors to a Russian-language 'ROI 15%' Telegram channel, so it is a brand-squat and ad-fraud utility rather than benign.
The page offers a tool to send fake TikTok Pixel events to TikTok's Events Manager by spoofing browser/IP data, presented as an 'ROI 15%' service with a Telegram contact link. This is a fraudulent service (fake analytics manipulation) rather than credential phishing, but it exploits TikTok's infrastructure name and targets advertisers with a deceptive monetization scheme.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Thursday, October 22, 2026
Same data as JSON: /api/zone/domain/roifortiktok.site. This page is not indexed by search engines and does not link to the site it describes.