Highscore 52 · flagged Tuesday, September 8, 2026

gsm-email.top

Appeared in the .top zone on Tuesday, September 8, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: top
+8
page asks for credentials
matched: Sign in to your account
+30
login form
matched: has_form+login words
+14
Registrar
Nameserver provider
Nameservers
ns1.openprovider.nl, ns2.openprovider.be, ns3.openprovider.eu
First-day state
active website
HTTP status
200
Page title
Login — GSM-EMAIL
Has a form
yes
Brand echoed

Model opinions

Second opinionsuspiciousconfidence 60%· claude-opus-5

Self-branded 'GSM-EMAIL' login panel with open self-registration and a Telegram-only operator contact on a fresh .top domain — no impersonation of any real brand, but the shape matches a private tooling/panel (bulk mail or SMS/OTP service) rather than a legitimate business; not decisive either way.

First passlooks like phishingconfidence 85%· claude-haiku-4-5

The domain gsm-email.top hosts a credential-harvesting login form with no legitimate brand identity. The form posts to itself (sealed-room pattern), has a Telegram contact link for operator communication, and uses a generic 'GSM-EMAIL' branding—characteristics of a phishing kit designed to capture credentials. The .top TLD and generic service name suggest this is a standalone credential trap rather than impersonation of a specific known brand.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Tuesday, September 8, 2026

Screenshot of gsm-email.top taken by the zone census on 2026-09-08

Same data as JSON: /api/zone/domain/gsm-email.top. This page is not indexed by search engines and does not link to the site it describes.