afpwer.sbs
Appeared in the .sbs zone on Monday, September 21, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
afpwer.sbs serves no content of its own and blanket-redirects to www.google.com; all Google branding, forms and links belong to the destination, so there is no impersonation by this domain. The combination of a nonsense label on .sbs, a NiceNIC registration behind Cloudflare NS, and a decoy redirect to Google is a common holding/cloaking posture for a domain awaiting an abusive payload, but nothing yet is decisive.
The domain afpwer.sbs is a brand-typosquat (resembles 'afpower' or similar) registered under a suspicious registrar (NICENIC) with Cloudflare nameservers, configured to silently redirect to www.google.com. The redirect bypasses the domain name entirely, making this a redirect-squat with no legitimate purpose — the attacker owns the suspicious name but visitors see only Google's real page, a classic deception infrastructure pattern used for SEO manipulation, credential harvesting redirects, or ph
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Monday, September 21, 2026
Same data as JSON: /api/zone/domain/afpwer.sbs. This page is not indexed by search engines and does not link to the site it describes.