usamazonrefund.top
Appeared in the .top zone on Tuesday, September 22, 2026; by the end of that day the census found boilerplate page. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Name concatenates 'us amazon refund' — an Amazon brand-squat with a refund lure that has no legitimate use, while the site currently serves only a default Chinese hosting-panel index.html (one of 213 identical staged pages), indicating infrastructure prepared but not yet weaponised.
Domain name 'usamazonrefund.top' combines Amazon brand with refund lure and suspicious TLD; however, the page is a default hosting placeholder in Chinese (not impersonating Amazon's login, portal, or refund form). The 213 identical pages in the cluster and use of free DNS (dnsowl.com) suggest infrastructure for abuse, but the current page shows no active phishing content yet—likely a staging domain awaiting deployment of a phishing form.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Tuesday, September 22, 2026
Same data as JSON: /api/zone/domain/usamazonrefund.top. This page is not indexed by search engines and does not link to the site it describes.