tiktokmod.ltd
Appeared in the .ltd zone on Wednesday, September 30, 2026; by the end of that day the census found active website. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The name squats the distinctive TikTok brand. The page is a Russian-language 'TikTokMod VPN' landing that uses TikTok's regional-block error message to push visitors to a third-party VPN signup at lk2.geovps.pro (Geodema). There is no credential or payment form, so this is a brand-squat affiliate funnel rather than phishing.
The domain tiktokmod.ltd uses TikTok's brand name to market a VPN service under its own 'TikTokMod VPN' brand with its own login/account system. This is a brand-squat: the site leverages TikTok's recognition to promote an unaffiliated VPN service, not impersonation of TikTok itself. The page makes no attempt to pose as TikTok's official service or capture TikTok credentials—it offers a third-party VPN solution, which constitutes abuse (brand squat) rather than phishing.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Wednesday, September 30, 2026
Same data as JSON: /api/zone/domain/tiktokmod.ltd. This page is not indexed by search engines and does not link to the site it describes.