Highscore 48 · flagged Sunday, September 13, 2026

sharepoint05.com

Appeared in the .com zone on Sunday, September 13, 2026; by the end of that day the census found boilerplate page. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: sharepoint
+30
brand plus digits
matched: sharepoint05
+8
identical page on many newborns
matched: 32 identical pages
+10
Registrar
Nameserver provider
Nameservers
sp1.gname-dns.com, sp2.gname-dns.com
First-day state
boilerplate page
HTTP status
503
Page title
Has a form
no
Brand echoed
sharepoint

Model opinions

Second opinionsuspiciousconfidence 60%· claude-opus-5

The domain resolves only to a GNAME domain-auction listing page (for-sale/expired inventory, all offsite links to gname.com), with no content of its own; the name embeds Microsoft's SharePoint product plus digits, which is a plausible brand-squat lure but the current page shows no deception, so the evidence is not yet decisive.

First passlooks like phishingtarget: Microsoft SharePointconfidence 92%· claude-haiku-4-5

The domain sharepoint05.com impersonates Microsoft SharePoint by using the brand name in the domain. The page displays a fake domain auction interface hosted on GNAME's infrastructure (gname.com), with a prominent 'Login Now' button and text stating 'You have not logged in the site, please click to login!' — classic phishing language designed to capture credentials. The 32 identical clustered pages, hidden form fields posting to gname.com, and the sealed-room architecture (forms posting to itsel

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Sunday, September 13, 2026

Screenshot of sharepoint05.com taken by the zone census on 2026-09-13

Same data as JSON: /api/zone/domain/sharepoint05.com. This page is not indexed by search engines and does not link to the site it describes.