Highscore 50 · flagged Wednesday, November 4, 2026

chasjpm.sbs

Appeared in the .sbs zone on Wednesday, November 4, 2026; by the end of that day the census found active website about finance loans. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: sbs
+8
page impersonates a brand
matched: Chase Bank
+22
brand in page title, not in the name
matched: chase
+20
Registrar
—
Nameserver provider
Nameservers
dns2018a.trouble-free.net, dns2018b.trouble-free.net
First-day state
active website
HTTP status
200
Page title
The Preferred Way to Bank - Chase Bank
Has a form
no
Brand echoed
—

Model opinions

Second opinionlooks like phishingtarget: Chase (JPMorgan Chase)confidence 93%· claude-opus-5-5

The name chasjpm.sbs is a Chase/JPM typosquat on a throwaway .sbs TLD. It hosts a full fake Chase Bank site with the Chase logo, FDIC claims, an 'Online Banking Sign In' button and 'Open an Account' flows, and a chase@chasjpm.sbs contact address. All 214 links stay on-site with no offsite hosts, the sealed fake-bank shape used to harvest banking credentials and deposits.

First passlooks like phishingtarget: chaseconfidence 64%· typesafe/jev-latest

typesafe first pass (gate 0.4): p=phishing:0.70 suspicious:0.28 abuse:0.01 | impersonates=0.98 credential=0.45 parked=0.12 evidence=2.1 | target=chase:1.00

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Wednesday, November 4, 2026

Screenshot of chasjpm.sbs taken by the zone census on 2026-11-04

Same data as JSON: /api/zone/domain/chasjpm.sbs. This page is not indexed by search engines and does not link to the site it describes.