TLD Threat Intelligence

Flagged .online Domains

5 domains using the .online extension have been flagged by threat-intelligence feeds. The .online extension is among the most-abused top-level domains in published phishing-landscape data, which is why it appears frequently in scam infrastructure.

5
Flagged Domains
31
Avg Risk Score
May 17
Last Flagged

Frequently Asked Questions

Are all .online websites scams?

No. The .online extension is among the most-abused top-level domains in published phishing-landscape data, which is why it appears frequently in scam infrastructure. Many legitimate sites use .online. This page lists only the specific .online domains flagged by threat-intelligence feeds — not the extension as a whole.

Why do scammers use .online domains?

Scammers favour cheap, fast-to-register extensions with slower abuse enforcement, because they expect the domain to be taken down within days. Registration cost and enforcement speed — not the extension's purpose — drive the choice.

How do I check if a specific .online site is safe?

Look it up here or on Google Safe Browsing and VirusTotal, and check its registration date with a WHOIS lookup. Very new domains imitating an established brand are a strong warning sign.

🔐Security Partner

Stop the next phishing attack before you click.

NordPass autofill only triggers on real domains. Fake login pages cannot trick it into entering your credentials.

Try NordPass →