Highscore 46 · flagged Saturday, August 29, 2026

oliveepisodehorse.beauty

Appeared in the .beauty zone on Saturday, August 29, 2026; by the end of that day the census found active website about travel hotel. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: beauty
+8
brand in page title, not in the name
matched: booking
+20
form on a brand-styled page
matched: has_form
+18
Registrar
Dynadot Inc
Nameserver provider
Nameservers
bowen.ns.cloudflare.com, piper.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
Linguist Hub — Small-Group Language Courses in San Fernando del Valle de Catamarca
Has a form
yes
Brand echoed

Model opinions

Second opinionlooks benignconfidence 62%· claude-opus-5

Page is a self-branded 'Linguist Hub' language-course site with a plain name/email/phone contact form and captcha — no credential or payment capture and no impersonation; the scorer's 'booking' brand hit is just the 'Book a Consultation' button. The random three-word .beauty name and generic template content are mildly odd, but nothing deceptive is present.

First passlooks like phishingtarget: Booking.comconfidence 85%· claude-haiku-4-5

The page title claims 'Linguist Hub' language courses, but the scorer detected 'booking' in the page title/content—a mismatch between domain name (oliveepisodehorse.beauty) and claimed brand. The form posts to self with name, email, tel, and captcha fields; operator contact via WhatsApp (wa.me) is a classic phishing operator-waiting pattern. The .beauty TLD combined with this sealed-room form architecture and mismatched branding suggests credential harvesting rather than a legitimate language co

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Saturday, August 29, 2026

Screenshot of oliveepisodehorse.beauty taken by the zone census on 2026-08-29

Same data as JSON: /api/zone/domain/oliveepisodehorse.beauty. This page is not indexed by search engines and does not link to the site it describes.