Criticalscore 66 · flagged Friday, October 2, 2026

tik-tok-18-app-5j.top

Appeared in the .top zone on Friday, October 2, 2026; by the end of that day the census found active website about adult. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: tiktok
+30
many hyphens
matched: 4
+6
brand plus digits
matched: tik-tok-18-app-5j
+8
TLD with a high abuse rate
matched: top
+8
brand name behind Cloudflare
matched: cloudflare.com
+6
brand name at a retail registrar
matched: PDR Ltd.
+8
Registrar
PDR Ltd.
Nameserver provider
Nameservers
ethan.ns.cloudflare.com, robin.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
VibeVideo - Watch Short Videos, Connect & Share Moments (18+)
Has a form
no
Brand echoed
tiktok

Model opinions

Second opinionlooks like abusetarget: TikTokconfidence 80%· claude-opus-5-5

The name 'tik-tok-18-app-5j' borrows the TikTok brand with an '18+' hook and a throwaway suffix, which fits a numbered squat campaign on a .top/Cloudflare/PDR setup. The page itself is a generic 'VibeVideo' adult short-video landing with a TikTok-style phone mockup, App Store/Google Play badges and no credential form, so the deception is in the name rather than a phishing page.

First passlooks like abuseconfidence 85%· claude-haiku-4-5

The domain uses TikTok brand signals (tik-tok in name) but presents as a different service ('VibeVideo'), a classic typosquat strategy. The site claims to be an adult video platform with its own branding and login, not impersonating TikTok directly for credential theft; however, the deceptive domain name designed to capture TikTok traffic, combined with the .top TLD and obfuscated naming pattern (tik-tok-18-app-5j), indicates brand-squatting abuse rather than legitimate independent service.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Friday, October 2, 2026

Screenshot of tik-tok-18-app-5j.top taken by the zone census on 2026-10-02

Same data as JSON: /api/zone/domain/tik-tok-18-app-5j.top. This page is not indexed by search engines and does not link to the site it describes.