Criticalscore 72 · flagged Tuesday, September 15, 2026

linkedlin.org

Appeared in the .org zone on Tuesday, September 15, 2026; by the end of that day the census found active website about saas & tech. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

one-letter brand typo
matched: linkedlin≈linkedin
+28
brand name on a rarely-seen nameserver
matched: monsterdns.net
+6
brand in page title, not in the name
matched: linkedin
+20
form on a brand-styled page
matched: has_form
+18
Registrar
Nameserver provider
Nameservers
dns1.monsterdns.net, dns2.monsterdns.net, dns3.monsterdns.net
First-day state
active website
HTTP status
200
Page title
LinkedIn: Log In or Sign Up
Has a form
yes
Brand echoed
linkedin

Model opinions

Second opinionlooks like phishingtarget: LinkedInconfidence 92%· claude-opus-5

linkedlin.org is a one-character typosquat of linkedin.com serving a pixel-accurate clone of the LinkedIn log-in/sign-up page (title 'LinkedIn: Log In or Sign Up', LinkedIn logo, sign-in forms with loginCsrfParam hidden fields), hosted on rare nameservers (monsterdns.net) — a mirrored credential-harvest page for LinkedIn accounts.

First passlooks like phishingtarget: LinkedInconfidence 99%· claude-haiku-4-5

Domain is a typosquat (linkedlin.org vs linkedin.com) with LinkedIn's login page layout, branding, and page title. Forms post to www.linkedin.com with hidden CSRF tokens, a classic phishing pattern designed to capture credentials by impersonating LinkedIn's actual sign-in interface.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Tuesday, September 15, 2026

Screenshot of linkedlin.org taken by the zone census on 2026-09-15

Same data as JSON: /api/zone/domain/linkedlin.org. This page is not indexed by search engines and does not link to the site it describes.