Highscore 42 · flagged Monday, October 19, 2026

cokker.online

Appeared in the .online zone on Monday, October 19, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

page impersonates a brand
matched: Netflix
+22
brand in page title, not in the name
matched: gmail
+20
Registrar
NameCheap, Inc.
Nameserver provider
Nameservers
coraline.ns.cloudflare.com, luke.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
Beranda — cokker online
Has a form
no
Brand echoed
—

Model opinions

Second opinionlooks like abuseconfidence 60%· claude-opus-5-5

This is an Indonesian SMM-panel and reseller shop under its own 'cokker online' brand, not a phish: it has no credential form, no offsite links, and the Netflix and Gmail mentions are products it sells, not impersonation. It sells fake engagement (8,133 follower, like and view services), ready-made Gmail accounts and temporary emails for receiving verification codes, plus grey-market 'premium' Netflix/Canva accounts, which is infrastructure for platform abuse and account fraud.

First passlooks like a scamconfidence 85%· claude-haiku-4-5

The site is a fraudulent digital-goods reseller (social media followers, email accounts, prepaid credits) operating under its own brand 'cokker online', not impersonating a specific organisation. While it mentions Gmail and Netflix as products to sell, it does not pretend to be Google or Netflix—it is selling unauthorized access to those services. This is scam/abuse (unlicensed digital goods fraud), not phishing.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Monday, October 19, 2026

Screenshot of cokker.online taken by the zone census on 2026-10-19

Same data as JSON: /api/zone/domain/cokker.online. This page is not indexed by search engines and does not link to the site it describes.