Criticalscore 64 · flagged Tuesday, September 1, 2026

undian-tiktok.online

Appeared in the .online zone on Tuesday, September 1, 2026; by the end of that day the census found active website about crypto web3. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: tiktok
+30
brand name behind Cloudflare
matched: cloudflare.com
+6
brand name at a retail registrar
matched: Name.com, Inc.
+8
brand in page title, not in the name
matched: apple
+20
Registrar
Name.com, Inc.
Nameserver provider
Nameservers
rosalie.ns.cloudflare.com, wilson.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
Undian Live TikTok 100% Resmi & Gratis | iPhone 18 Pro Max
Has a form
no
Brand echoed
tiktok

Model opinions

Second opinionlooks like phishingtarget: TikTokconfidence 75%· claude-opus-5

Domain 'undian-tiktok.online' plus a cloned TikTok Live UI claiming to be the 'Program Resmi TikTok Live Indonesia' running a free iPhone 18 Pro Max / e-wallet giveaway, with a 'Daftar Tiket VIP' registration flow and a WhatsApp 'Admin' as the only offsite link — a classic Indonesian undian prize lure impersonating TikTok to harvest personal data and extract fees.

First passlooks like a scamconfidence 92%· claude-haiku-4-5

The domain impersonates a TikTok Live giveaway but is not operated by TikTok. It mimics the TikTok Live interface and claims to be an 'Official TikTok Live Indonesia Program' while directing users to register and contact admins via WhatsApp (wa.me link). The mention of 'iPhone 18 Pro Max' (a non-existent product) and the structure of collecting registrations for unverified prize drawings is a classic lottery/prize scam, not credential phishing.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Tuesday, September 1, 2026

Screenshot of undian-tiktok.online taken by the zone census on 2026-09-01

Same data as JSON: /api/zone/domain/undian-tiktok.online. This page is not indexed by search engines and does not link to the site it describes.