crystaldust.xyz
Appeared in the .xyz zone on Sunday, October 25, 2026; by the end of that day the census found active website about saas & tech. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Throwaway .xyz on Vercel running a 'CrystalDust' token game that leans on the Robinhood name ('Mainnet Protocol Live (Robinhood L2)', 'load your gems from Robinhood Chain'). It pushes Connect Wallet, staking and burning of $Dust, seed mints and 'Auto-Yield' rewards, which fits a crypto lure / wallet-drainer setup rather than a page impersonating Robinhood's own login.
The page is a fake cryptocurrency incubator/yield farming scheme referencing 'Robinhood Chain' (a non-existent blockchain) and prompting wallet connection to stake tokens and earn yield. While it does not impersonate Robinhood Financial Corp. directly, it exploits the brand name to lend credibility to a fraudulent DeFi protocol. The form invites wallet connection and token staking with no legitimate backing, characteristic of crypto scams rather than phishing for passwords.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Sunday, October 25, 2026
Same data as JSON: /api/zone/domain/crystaldust.xyz. This page is not indexed by search engines and does not link to the site it describes.