Criticalscore 62 · flagged Sunday, September 6, 2026

openaione.vip

Appeared in the .vip zone on Sunday, September 6, 2026; by the end of that day the census found active website about news media. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: openai
+30
brand name at a retail registrar
matched: Gname.com Pte. Ltd.
+8
brand name at a watch-list registrar
matched: Gname.com Pte. Ltd.
+6
form on a brand-styled page
matched: has_form
+18
Registrar
Gname.com Pte. Ltd.
Nameserver provider
Nameservers
a5.share-dns.com, b5.share-dns.net
First-day state
active website
HTTP status
200
Page title
Loading...
Has a form
yes
Brand echoed
openai

Model opinions

Second opinionlooks like a scamtarget: OpenAIconfidence 82%· claude-opus-5

Page renders a crypto 'wealth' platform branded 'Open AI' with realtime USDT/BTC rates, deposit/withdraw balances, invitation-code registration and Chinese-language login/register buttons — the standard fake-investment/deposit fraud template, dressed in the OpenAI name it does not own (registered via Gname, sealed-room self-posting login form, no offsite links).

First passlooks like phishingtarget: OpenAIconfidence 95%· claude-haiku-4-5

Domain openaione.vip impersonates OpenAI with 'Open AI' branding in the header and presents a fake financial trading platform with login/registration forms that post to self (sealed-room phishing pattern). The page falsely claims to offer crypto and financial products under the OpenAI brand to deceive users into surrendering credentials.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Sunday, September 6, 2026

Screenshot of openaione.vip taken by the zone census on 2026-09-06

Same data as JSON: /api/zone/domain/openaione.vip. This page is not indexed by search engines and does not link to the site it describes.