Criticalscore 100 · flagged Sunday, September 20, 2026

fedextracking.sbs

Appeared in the .sbs zone on Sunday, September 20, 2026; by the end of that day the census found active website about real estate. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: fedex
+30
lure words (login, verify, secure…)
matched: track,tracking
+32
TLD with a high abuse rate
matched: sbs
+8
page impersonates a brand
matched: FedEx
+22
brand name and brand-styled page
matched: fedex
+15
Registrar
Nameserver provider
Nameservers
byte.dns-parking.com, pixel.dns-parking.com
First-day state
active website
HTTP status
200
Page title
Home - FedEx
Has a form
no
Brand echoed
fedex

Model opinions

Second opinionlooks like phishingtarget: FedExconfidence 93%· claude-opus-5

Domain fedextracking.sbs hosts a cloned FedEx page (title 'Home - FedEx', FedEx logo/aircraft imagery, 'Track your FedEx® shipments') with a non-FedEx callback number 929-242-6868 prominently placed and decoy links to the real fedex.com; this is a parcel-tracking impersonation front designed to harvest tracking/personal details or route victims to a fake support line.

First passlooks like phishingtarget: FedExconfidence 95%· claude-haiku-4-5

The domain fedextracking.sbs impersonates FedEx with the brand name, logo, and page title 'Home - FedEx', presenting a tracking interface on a suspicious .sbs domain with DNS parking nameservers. The page mimics FedEx's official site design and messaging ('Track your FedEx shipments', 'Why ship with FedEX?') to deceive visitors into believing they are on the legitimate fedex.com, a classic phishing setup.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Sunday, September 20, 2026

Screenshot of fedextracking.sbs taken by the zone census on 2026-09-20

Same data as JSON: /api/zone/domain/fedextracking.sbs. This page is not indexed by search engines and does not link to the site it describes.