# WEB-083 — Hosting shared with malicious neighbours is scored against the domain

> A domain resolving to an IP or ASN shared with known-malicious sites carries that reputation into the brand score.

- **Rule ID:** WEB-083
- **Layer:** Website (`WEBSITE`)
- **Checks:** `resolved IP and ASN neighbours`
- **Severity:** MEDIUM — Usually survives review, but lowers your trust score or invites manual review.
- **When it bites:** Gates approval — get this wrong and registration is refused
- **How it is detected:** External record we cannot query — reported as a warning to verify
- **Fix type:** Wait on an external system or a required interval
- **Required by:** Twilio
- **Applies:** Applies to every 10DLC registration.
- **Canonical URL:** https://ekas.io/rules/10dlc/website/web-083/

## Why this rule exists

Reputation is assessed at the address as well as the name, so a business on cheap shared hosting inherits whatever its neighbours did. Nothing about the business causes it and nothing on the site reveals it, which makes it one of the hardest findings to act on — the brand looks clean from every angle the operator can see.

## How to fix it

Where vetting repeatedly stalls with no finding on the content, move the site to a dedicated IP or a reputable host and re-submit. Done when the domain resolves to an address whose other tenants you can account for.

## Provider rejection codes

| Provider | Code | Resubmission allowed |
| --- | --- | --- |
| Twilio (gen2) | `30961` | yes |

## Check this yourself

**Does this domain share its IP address with sites you cannot account for?**

1. Run a reverse-IP lookup on the domain.
2. Hundreds of unrelated sites on the same address is the signal — cheap shared hosting inherits whatever its neighbours did.
3. The only fix is moving to a dedicated IP or a reputable host, then resubmitting.

*What wrong looks like:* Vetting stalls repeatedly with no finding on the content. Nothing about the business caused it and nothing on the site reveals it, so the brand looks clean from every angle the operator can see.

## Notes

We resolve no addresses and hold no reputation feed. The user can check this themselves with a reverse-IP lookup on their domain: if it shares an address with hundreds of unrelated sites, that is the signal, and changing host is the only fix.