Highscore 55 · flagged Monday, October 5, 2026

zellebusinessalert.online

Appeared in the .online zone on Monday, October 5, 2026; by the end of that day the census found empty page. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: zelle
+30
lure words (login, verify, secure…)
matched: alert
+26
brand name behind Cloudflare
matched: cloudflare.com
+6
brand name at a retail registrar
matched: Cloudflare, Inc.
+8
brand in page title, not in the name
matched: cloudflare
+20
Registrar
Cloudflare, Inc.
Nameserver provider
Nameservers
eloise.ns.cloudflare.com, jacob.ns.cloudflare.com
First-day state
empty page
HTTP status
200
Page title
Cloudflare Registrar
Has a form
no
Brand echoed
zelle

Model opinions

Second opinionlooks like abusetarget: Zelleconfidence 80%· claude-opus-5-5

The name pairs the distinctive payments brand Zelle with 'business alert' lure wording on a cheap .online TLD. The page is only a default Cloudflare Registrar placeholder with no form, so this is a brand-squat likely staged for later payment-alert phishing, not yet an active phish. The Cloudflare title and links are the registrar's own template, not impersonation.

First passlooks benignconfidence 95%· claude-haiku-4-5

This is a Cloudflare Registrar default parked page for an unset domain. The page title says 'Cloudflare Registrar' (not impersonating Zelle), the content is a standard hosting-provider placeholder stating 'The owner of this domain hasn't put up a website yet', and all links point to legitimate Cloudflare domains. The domain name contains 'zelle' and 'alert' but the page makes no attempt to impersonate Zelle or capture credentials—it is simply an unconfigured domain with a standard Cloudflare lan

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Monday, October 5, 2026

Screenshot of zellebusinessalert.online taken by the zone census on 2026-10-05

Same data as JSON: /api/zone/domain/zellebusinessalert.online. This page is not indexed by search engines and does not link to the site it describes.