sabuy.click
Appeared in the .click zone on Tuesday, October 13, 2026; by the end of that day the census found active website. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The page is under its own 'SaBuy' brand and does not pose as Netflix, so it is not phishing. It is a Thai grey-market shop renting shared or resold Netflix, YouTube Premium, HBO Max, Prime Video and VIU accounts for 10–110 baht, with 'password sent instantly', PromptPay top-ups and a LINE contact. That is a ToS-violating account-resale front akin to piracy.
SaBuy is a third-party credential-sharing marketplace selling unauthorized access to Netflix, YouTube Premium, Disney+, and other streaming services. While it uses brand names in its marketing, it does not impersonate these brands' login pages or interfaces; instead, it operates as a fraudulent reseller of subscription account credentials, which violates the terms of service of all listed platforms and constitutes payment fraud.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Tuesday, October 13, 2026
Same data as JSON: /api/zone/domain/sabuy.click. This page is not indexed by search engines and does not link to the site it describes.