Highscore 46 · flagged Tuesday, September 1, 2026

coldemailinboxes.sbs

Appeared in the .sbs zone on Tuesday, September 1, 2026; by the end of that day the census found redirects elsewhere. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: sbs
+8
brand in page title, not in the name
matched: microsoft
+20
form on a brand-styled page
matched: has_form
+18
Registrar
HOSTINGER operations, UAB
Nameserver provider
Nameservers
horizon.dns-parking.com, orbit.dns-parking.com
First-day state
redirects elsewhere
HTTP status
200
Page title
100 Microsoft 365 Inboxes for Outbound — $30
Has a form
yes
Brand echoed

Model opinions

Second opinionlooks benignconfidence 66%· claude-opus-5

coldemailinboxes.sbs is an exact-match alternate-TLD redirect to the operator's own site coldemailinboxes.io, whose branding and forms are its own; the 'Microsoft 365' wording describes the inboxes being resold, not an impersonation of Microsoft (no Microsoft logo, portal or credential capture). The underlying bulk cold-email inbox service is grey-area spam infrastructure, but the domain itself is a legitimate defensive/marketing redirect on Hostinger parking NS.

First passlooks like abuseconfidence 92%· claude-haiku-4-5

This is a bulk email infrastructure service selling Microsoft 365 inboxes for mass outbound email campaigns ('cold emailing'). While the destination site coldemailinboxes.io is legitimately branded with its own name, the .sbs redirect domain combined with DNS parking nameservers, the focus on provisioning 'authenticated' inboxes for high-volume sending, and the business model of selling email infrastructure for outbound campaigns at scale indicates this is likely a spam/abuse operation. The serv

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Tuesday, September 1, 2026

Screenshot of coldemailinboxes.sbs taken by the zone census on 2026-09-01

Same data as JSON: /api/zone/domain/coldemailinboxes.sbs. This page is not indexed by search engines and does not link to the site it describes.