2692gora.sbs
Appeared in the .sbs zone on Monday, September 21, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The domain itself serves no content, only a blanket redirect to www.google.com — a classic cloaking/holding behaviour for throwaway domains that serve real payloads selectively by geo/user-agent; the numeric-prefix pattern (2692gora), cheap .sbs TLD, NiceNIC registration and Cloudflare NS fit a bulk-registered campaign, but nothing on the name or the redirect target impersonates any brand, so evidence of actual phishing is not yet decisive.
The domain 2692gora.sbs is a typosquat redirect with no legitimate purpose. It redirects directly to Google's homepage, serving as a brand-squat on the .sbs TLD (a known abuse vector). The domain name itself contains no Google branding and exists only to redirect traffic, which is the hallmark of a squat or redirect fraud scheme rather than phishing per se.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Monday, September 21, 2026
Same data as JSON: /api/zone/domain/2692gora.sbs. This page is not indexed by search engines and does not link to the site it describes.