cesi888.site
Appeared in the .site zone on Tuesday, November 10, 2026; by the end of that day the census found active website about e-commerce & retail. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The page is a Chinese-language bulk marketplace selling Facebook, Instagram, TikTok, Gmail, Apple ID and Telegram TDATA/API accounts plus SMS-verification numbers, run through a Telegram operator (TG:King823) and an offsite card-key shop (zhy.trxxexchange.top). The Netflix and Gmail hits are product-category labels, not impersonation, and there is no login form, so this is an illicit account-trading front that enables fraud rather than a phish.
This is a marketplace for illicitly obtained social media accounts (Facebook, Instagram, Twitter, Discord, Google, Microsoft, Apple, etc.) and email credentials. The site explicitly sells compromised or fraudulently obtained accounts in bulk/retail, operating as an account-trafficking marketplace with Telegram operator contact. While the scorer flagged Netflix/Gmail brand mentions, the core abuse is account credential trafficking, not impersonation of any single brand—the site is its own crimina
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Tuesday, November 10, 2026
Same data as JSON: /api/zone/domain/cesi888.site. This page is not indexed by search engines and does not link to the site it describes.