Highscore 42 · flagged Friday, August 28, 2026

beylikduzuebayan.xyz

Appeared in the .xyz zone on Friday, August 28, 2026; by the end of that day the census found active website about adult. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: ebay
+14
TLD with a high abuse rate
matched: xyz
+8
brand name behind Cloudflare
matched: cloudflare.com
+6
brand name at a retail registrar
matched: NameCheap, Inc.
+8
brand name at a watch-list registrar
matched: NameCheap, Inc.
+6
Registrar
NameCheap, Inc.
Nameserver provider
Nameservers
dan.ns.cloudflare.com, malavika.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
Beylikdüzü Escort | Escort Beylikdüzü | Beylikdüzü Eskort
Has a form
no
Brand echoed
ebay

Model opinions

Second opinionlooks benignconfidence 78%· claude-opus-5

The "ebay" match is a false positive from the Turkish phrase "Beylikdüzü e-bayan"; the page is a Turkish escort-listing site with its own content, images and a WhatsApp contact number, with no login form, payment capture, or impersonation of any organisation. It is an adult/SEO-doorway site (heavy cross-linking to beylikduzu945.click) rather than phishing or brand abuse.

First passlooks like abuseconfidence 95%· claude-haiku-4-5

This is an escort services directory using a typosquat domain name (beylikduzuebayan.xyz) that mimics eBay's brand through 'ebay' in the domain. The page has no login form or credential capture, but rather advertises adult services with contact details (WhatsApp), making it a brand-squat with commercial adult content rather than phishing. The eBay brand association appears opportunistic for search/SEO purposes rather than impersonation of eBay's actual service.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Friday, August 28, 2026

Screenshot of beylikduzuebayan.xyz taken by the zone census on 2026-08-28

Same data as JSON: /api/zone/domain/beylikduzuebayan.xyz. This page is not indexed by search engines and does not link to the site it describes.