Highscore 55 · flagged Monday, September 21, 2026

tiktk.xyz

Appeared in the .xyz zone on Monday, September 21, 2026; by the end of that day the census found boilerplate page. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

one-letter brand typo
matched: tiktk≈tiktok
+28
TLD with a high abuse rate
matched: xyz
+8
brand name at a retail registrar
matched: Dynadot Inc
+8
brand name at a watch-list registrar
matched: Dynadot Inc
+6
identical page on many newborns
matched: 43 identical pages
+10
Registrar
Dynadot Inc
Nameserver provider
Nameservers
ns1.dyna-ns.net, ns2.dyna-ns.net
First-day state
boilerplate page
HTTP status
200
Page title
恭喜,站点创建成功!
Has a form
no
Brand echoed
tiktok

Model opinions

Second opinionlooks like abusetarget: TikTokconfidence 60%· claude-opus-5

tiktk.xyz is a single-character-drop typosquat of tiktok.com serving only a default Chinese hosting-panel index.html (站点创建成功) with no content or links, and it sits in a cluster of 43 identical placeholder pages — a staged brand-squat whose only plausible purpose is later deception, though no deceptive content is live yet.

First passlooks like abusetarget: TikTokconfidence 92%· claude-haiku-4-5

The domain tiktk.xyz is a typosquat of TikTok with a brand-similar name (tiktk≈tiktok) and .xyz TLD commonly associated with abuse. The page displays only a Chinese hosting panel placeholder ('site creation successful'), indicating the domain was registered as infrastructure for future phishing or scam deployment rather than legitimate use. The cluster of 43 identical pages under similar typosquat patterns confirms a coordinated squatting campaign.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Monday, September 21, 2026

Screenshot of tiktk.xyz taken by the zone census on 2026-09-21

Same data as JSON: /api/zone/domain/tiktk.xyz. This page is not indexed by search engines and does not link to the site it describes.