Highscore 55 · flagged Tuesday, September 15, 2026

cloud-mail.sbs

Appeared in the .sbs zone on Tuesday, September 15, 2026; by the end of that day the census found registrar placeholder. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

one-letter brand typo
matched: cloud≈icloud
+28
TLD with a high abuse rate
matched: sbs
+8
brand name at a retail registrar
matched: NameCheap, Inc.
+8
brand name at a watch-list registrar
matched: NameCheap, Inc.
+6
identical page on many newborns
matched: 4673 identical pages
+10
Registrar
NameCheap, Inc.
Nameserver provider
Nameservers
dns1.registrar-servers.com, dns2.registrar-servers.com
First-day state
registrar placeholder
HTTP status
200
Page title
Has a form
no
Brand echoed
icloud

Model opinions

Second opinionsuspiciousconfidence 50%· claude-opus-5

Only a Namecheap registrar parking placeholder is live, so there is no deceptive content yet; the name is generic webmail wording ('cloud-mail') on a high-abuse .sbs TLD, a common precursor to generic webmail credential phishing, but 'cloud'≈'icloud' is not a convincing typosquat and nothing here is decisive.

First passlooks benignconfidence 95%· claude-haiku-4-5

This is a Namecheap parking/auction page for a newly registered domain. The page displays the Namecheap branding, domain auction listings, and links to Namecheap's own services and app stores—standard registrar placeholder content. While the domain name 'cloud-mail.sbs' contains a brand-adjacent word ('cloud'), there is no impersonation: the page does not pretend to be Apple, iCloud, or any other organization, and contains no login form or credential-harvesting elements.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Tuesday, September 15, 2026

Screenshot of cloud-mail.sbs taken by the zone census on 2026-09-15

Same data as JSON: /api/zone/domain/cloud-mail.sbs. This page is not indexed by search engines and does not link to the site it describes.