Highscore 46 · flagged Tuesday, September 1, 2026

coldemailinboxes.fun

Appeared in the .fun zone on Tuesday, September 1, 2026; by the end of that day the census found redirects elsewhere. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: fun
+8
brand in page title, not in the name
matched: microsoft
+20
form on a brand-styled page
matched: has_form
+18
Registrar
HOSTINGER operations, UAB
Nameserver provider
Nameservers
cosmos.dns-parking.com, nova.dns-parking.com
First-day state
redirects elsewhere
HTTP status
200
Page title
100 Microsoft 365 Inboxes for Outbound — $30
Has a form
yes
Brand echoed

Model opinions

Second opinionlooks benignconfidence 60%· claude-opus-5

The .fun name is simply an alternate-TLD registration by the operator of coldemailinboxes.io and 301s to that same-brand site; the destination is a self-branded cold-email infrastructure vendor whose 'Microsoft 365' wording is descriptive of the product resold, not an attempt to pose as Microsoft (no Microsoft logo, no credential capture — only a newsletter GET form). The only caveat is that bulk-mailbox provisioning for outbound is spam-adjacent gray-market business, but there is no deception o

First passlooks like abuseconfidence 92%· claude-haiku-4-5

coldemailinboxes.fun is a typosquat redirect to coldemailinboxes.io, a bulk email infrastructure service selling Microsoft 365 inboxes for mass outbound email campaigns. The .fun domain with DNS-parking nameservers serves no independent purpose other than to funnel traffic to the same service; this is a clear squat/redirect abuse pattern. The destination site itself is not phishing (it operates under its own brand and does not impersonate Microsoft), but the typosquat redirect domain exists sole

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Tuesday, September 1, 2026

Screenshot of coldemailinboxes.fun taken by the zone census on 2026-09-01

Same data as JSON: /api/zone/domain/coldemailinboxes.fun. This page is not indexed by search engines and does not link to the site it describes.