Highscore 56 · flagged Saturday, October 31, 2026

unlocks.top

Appeared in the .top zone on Saturday, October 31, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

lure words (login, verify, secure…)
matched: unlock
+6
TLD with a high abuse rate
matched: top
+8
page impersonates a brand
matched: PayPal
+22
brand in page title, not in the name
matched: facebook
+20
Registrar
Spaceship, Inc.
Nameserver provider
Nameservers
bart.ns.cloudflare.com, dell.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
SUB2UNLOCK — Unlock Links Through Social Quests
Has a form
no
Brand echoed
—

Model opinions

Second opinionlooks benignconfidence 72%· claude-opus-5-5

The page is a self-branded 'Sub2Unlock' link-gating service for creators that uses its own UNLOCKS.TOP logo and has no credential form. 'Sign in with Google' is an OAuth button, and PayPal, Facebook and YouTube are named only as payout methods or supported platforms, not impersonated.

First passlooks like a scamconfidence 85%· claude-haiku-4-5

unlocks.top is a link-gating service that impersonates social platform verification (YouTube, TikTok, Facebook subscribe/follow buttons) to drive fraudulent engagement traffic and extract payment via PayPal/bank transfer under the guise of creator monetization. The page displays brand logos (YouTube, TikTok, Facebook) to deceive users into completing fake social actions, not to impersonate a single target brand, making this fraud rather than credential phishing.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Saturday, October 31, 2026

Screenshot of unlocks.top taken by the zone census on 2026-10-31

Same data as JSON: /api/zone/domain/unlocks.top. This page is not indexed by search engines and does not link to the site it describes.