A link promised a viral clip and dropped you on 618xy.com instead. Here is what the site does before you ever get near a video.
618xy.com follows a pattern that shows up on dozens of near identical domains: a grid of thumbnails, a promise of trending clips from every major platform, and a page that never quite lets you press play. If you landed here from a shared link on TikTok, Instagram, or a group chat, read this before you tap anything else.
Open 618xy.com and you get rows of thumbnails marked as trending, viral, or exclusive, sitting under a headline about watching clips without an app. There is no functioning search, no upload date, and no way to confirm a real video sits behind any of those thumbnails. Many of the images are recycled across other sites running the same template with a different name in the logo.
Clicking a thumbnail does not start playback. It starts a chain of redirects that moves you through a stack of ad pages, permission prompts, and occasionally a fake "verify you are human" screen. Where that chain ends depends on your device and browser, but it rarely ends with a video. On mobile it often lands on a subscription trap or a push notification prompt disguised as a play button.
Sites built like this earn money from the chain itself, not from the content. Every ad impression, every notification permission granted, and every click on a fake button pays the site operator through affiliate networks that reward traffic volume over anything else. A working video would end that chain early, so the page is built to stretch it out for as long as possible.
No. The site is built around keeping you clicking rather than showing you anything real. Granting notification permissions here means ongoing spam notifications that are hard to switch off later. Any download prompt that appears along the way should be treated as unrelated to whatever video you were promised, because it is.
This layout is not unique to 618xy.com. The same thumbnail grid, the same missing search bar, and the same redirect chain appear across a rotating set of domains that get flagged and replaced on a loop. ScamAdviser has documented the pattern on several other sites, including Fyn4u Review and the Apk725.net breakdown, which walk through the same funnel with a different domain name attached.
Close the tab and clear notification permissions for the site in your browser settings, since that is usually the lasting damage.
If you entered any personal details or downloaded anything along the way, run a scan with security software you trust and watch your accounts for unusual activity.
Not sure how sharp your scam radar is? Test your Scam IQ with ScamAdviser's Scam IQ Test and see how you score against real examples like this one.
This article was written by a ScamAdviser volunteer scam fighter. If you spot an inaccuracy or think something is missing, contact ScamAdviser through their contact form.
