Highscore 56 · flagged Monday, September 21, 2026

tiktok.boats

Appeared in the .boats zone on Monday, September 21, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: tiktok
+10
TLD with a high abuse rate
matched: boats
+8
brand name at a retail registrar
matched: Gname.com Pte. Ltd.
+8
brand name at a watch-list registrar
matched: Gname.com Pte. Ltd.
+6
form on a brand-styled page
matched: has_form
+18
form submits over plain HTTP
matched: http://tiktok.boats/index/user/login.html
+6
Registrar
Gname.com Pte. Ltd.
Nameserver provider
Nameservers
a8.share-dns.com, b8.share-dns.net
First-day state
active website
HTTP status
200
Page title
login
Has a form
yes
Brand echoed
tiktok

Model opinions

Second opinionlooks like a scamtarget: TikTokconfidence 70%· claude-opus-5

Domain uses the TikTok brand on a cheap TLD via a bulk registrar, but the live page at /index/user/login.html is a generic 'Ama-shop' login/register/redeem portal with get-rich-quick sloganeering — the signature of a task/commission earning-platform fraud that borrows the TikTok (and Amazon) names rather than a credential-harvesting clone of TikTok's real login.

First passlooks like phishingtarget: TikTokconfidence 92%· claude-haiku-4-5

Domain impersonates TikTok with brand name in URL; login form at /index/user/login.html on unrelated .boats TLD served over HTTP; page title 'login' and text containing 'login register' confirms credential-capture intent. Unrelated 'Ama-shop' text suggests copied template, typical of phishing infrastructure.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

Same data as JSON: /api/zone/domain/tiktok.boats. This page is not indexed by search engines and does not link to the site it describes.