beixueyun.sbs
Appeared in the .sbs zone on Monday, September 28, 2026; by the end of that day the census found active website about ai software. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The page is a Chinese proxy/VPN 'airport' service under its own brand 贝雪云, which matches the domain's pinyin (beixueyun), selling Shadowsocks/Trojan/Hysteria2 relay plans. Netflix/YouTube appear only as supported streaming use cases, not as impersonation, and no credential form or brand-portal mimicry is present.
The scorer flagged 'Netflix' brand impersonation, but the page is a Chinese-language VPN/proxy acceleration service ('贝雪云') with no Netflix branding, login forms, or credential capture visible. The brand-in-title signal appears to be a false positive; however, the .sbs TLD and the service's nature (offering Shadowsocks/Trojan protocols for circumventing geo-blocking) suggest potential abuse infrastructure rather than legitimate service, warranting further investigation.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
Same data as JSON: /api/zone/domain/beixueyun.sbs. This page is not indexed by search engines and does not link to the site it describes.