Highscore 52 · flagged Tuesday, September 15, 2026

usairs.online

Appeared in the .online zone on Tuesday, September 15, 2026; by the end of that day the census found active website about news media. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

page asks for credentials
matched: Sign in to your account
+30
page impersonates a brand
matched: IRS
+22
Registrar
Nameserver provider
Nameservers
horizon.dns-parking.com, orbit.dns-parking.com
First-day state
active website
HTTP status
200
Page title
File Your Taxes with IRS | IRS
Has a form
no
Brand echoed

Model opinions

Second opinionlooks like phishingtarget: IRSconfidence 96%· claude-opus-5

Full clone of the IRS homepage (IRS logo, 'An official website of the United States Government', 'Do more with an IRS account', 'Sign in to your account', document upload tool) on a non-government domain 'usairs.online' hosted on dns-parking nameservers, with typos ('Sing in to your account', 'IRS later or notice') and decoy links to the real irs.gov — a tax-account credential/PII harvesting page.

First passlooks like phishingtarget: IRSconfidence 98%· claude-haiku-4-5

The domain usairs.online impersonates the IRS with a fake login page claiming "Sign in to your account" and displaying the IRS logo, official seal, and page title. The page is hosted on a parking nameserver (dns-parking.com) and contains credential-capture forms, classic hallmarks of IRS phishing despite links to the real irs.gov being present as decoys.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Tuesday, September 15, 2026

Screenshot of usairs.online taken by the zone census on 2026-09-15

Same data as JSON: /api/zone/domain/usairs.online. This page is not indexed by search engines and does not link to the site it describes.