Highscore 48 · flagged Wednesday, September 9, 2026

boxbox.email

Appeared in the .email zone on Wednesday, September 9, 2026; by the end of that day the census found boilerplate page. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: xbox
+30
brand name at a retail registrar
matched: Tucows Domains Inc.
+8
identical page on many newborns
matched: 1347 identical pages
+10
Registrar
Tucows Domains Inc.
Nameserver provider
Nameservers
ns1.renewyourname.net, ns2.renewyourname.net
First-day state
boilerplate page
HTTP status
200
Page title
Has a form
no
Brand echoed
xbox

Model opinions

Second opinionlooks benignconfidence 92%· claude-opus-5

Standard Tucows expired-domain parking page ('This domain has expired... contact your registration provider') with no form and only a link to tucowsdomains.com; the 'xbox' brand hit is a substring artefact of 'boxbox' (a common F1 term), not a typosquat.

First passlooks like abuseconfidence 85%· claude-haiku-4-5

This is a parked/expired domain page showing a generic hosting-provider placeholder with a green expiration notice. The scorer detected 1347 identical pages (a brand-squat cluster pattern), but the page itself contains no phishing attempt—no login form, no impersonation of Xbox or any organisation, just a standard registrar placeholder. The 'xbox' brand word in the domain name combined with the cluster pattern indicates typosquatting, not phishing.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Wednesday, September 9, 2026

Screenshot of boxbox.email taken by the zone census on 2026-09-09

Same data as JSON: /api/zone/domain/boxbox.email. This page is not indexed by search engines and does not link to the site it describes.