Highscore 46 · flagged Tuesday, October 13, 2026

vtdmxhvip.click

Appeared in the .click zone on Tuesday, October 13, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: click
+8
brand in page title, not in the name
matched: gmail
+20
form on a brand-styled page
matched: has_form
+18
Registrar
GMO Internet, Inc. d/b/a Onamae.com
Nameserver provider
Nameservers
agustin.ns.cloudflare.com, raphaela.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
vtdmxhvip.click — Dịch vụ mạng xã hội
Has a form
yes
Brand echoed
—

Model opinions

Second opinionlooks benignconfidence 60%· claude-opus-5-5

The page is a Vietnamese social-media engagement-boosting (SMM panel) landing page under its own generic name. It funnels visitors to its main site lpkmxh.id.vn and lists Facebook, TikTok, YouTube and Instagram only as service categories, with no brand logos or account-login impersonation; the scorer's 'gmail' title hit is not visible in the actual title. The throwaway .click satellite name and the self-posting login form are a gray-area pattern, but they are not evidence of phishing.

First passlooks like a scamconfidence 85%· claude-haiku-4-5

A login/signup form on a Vietnamese social-media-services site (claiming to offer TikTok, Facebook, Instagram, YouTube engagement boosts) that posts to itself with no legitimate offsite verification or real brand affiliation. The page title mentions 'gmail' (brand-in-title-not-name signal) but the page itself offers fake social-media growth services—a classic engagement-farming scam rather than phishing of a specific brand. The sealed-room password form and redirect to lpkmxh.id.vn for 'service

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Tuesday, October 13, 2026

Screenshot of vtdmxhvip.click taken by the zone census on 2026-10-13

Same data as JSON: /api/zone/domain/vtdmxhvip.click. This page is not indexed by search engines and does not link to the site it describes.