Highscore 46 · flagged Thursday, September 3, 2026

arsys.lat

Appeared in the .lat zone on Thursday, September 3, 2026; by the end of that day the census found redirects elsewhere. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

free DNS provider
matched: dnsowl.com
+8
brand in page title, not in the name
matched: microsoft
+20
form on a brand-styled page
matched: has_form
+18
Registrar
NameSilo, LLC
Nameserver provider
Nameservers
ns1.dnsowl.com, ns2.dnsowl.com, ns3.dnsowl.com
First-day state
redirects elsewhere
HTTP status
200
Page title
Search - Microsoft Bing
Has a form
yes
Brand echoed

Model opinions

Second opinionsuspiciousconfidence 55%· claude-opus-5

arsys.lat serves no content of its own and simply 302s to www.bing.com; all Microsoft/Bing branding and the search form in the evidence belong to Bing, not to this domain, so there is no impersonation on the page. The name matches the Spanish hosting brand Arsys and sits on free DNSOwl nameservers at NameSilo — a common holding pattern for a domain awaiting repurposing — but a redirect to a mainstream search engine is not itself deceptive, so the evidence is not decisive.

First passlooks like phishingtarget: Microsoftconfidence 95%· claude-haiku-4-5

The domain arsys.lat redirects to www.bing.com, disguising its identity to impersonate Microsoft's search engine. The typosquat name (arsys suggests a tech/systems company), combined with free DNS hosting (dnsowl.com), a redirect strategy to hide the true origin, and forms that POST to Bing's servers, are classic phishing infrastructure designed to capture credentials or data by making visitors believe they are on Microsoft's legitimate Bing homepage.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Thursday, September 3, 2026

Screenshot of arsys.lat taken by the zone census on 2026-09-03

Same data as JSON: /api/zone/domain/arsys.lat. This page is not indexed by search engines and does not link to the site it describes.