59890737.xyz
Appeared in the .xyz zone on Thursday, November 12, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The domain redirects to a genuine Cloudflare Zero Trust Access gate on cloudflareaccess.com. The team name 'contenido-59890737' and the JWT hostname both match this domain, and it protects a private 'Calendario de contenido' app with an email one-time-code login, which is a legitimate access-control setup, not Cloudflare impersonation. The numeric .xyz name has no brand or lure content, though the gate does hide whatever is behind it.
The domain 59890737.xyz redirects to a Cloudflare Access login page that impersonates Cloudflare's branding (logo, 'Cloudflare Access' title, page layout) to capture email credentials. The form posts email, client_id, connector_id, and connector_type to contenido-59890737.cloudflareaccess.com—a subdomain designed to mimic Cloudflare's infrastructure. This is a sealed-room phishing setup: the arbitrary numeric domain name, offsite redirect to a lookalike Cloudflare Access page, and credential-har
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Thursday, November 12, 2026
Same data as JSON: /api/zone/domain/59890737.xyz. This page is not indexed by search engines and does not link to the site it describes.