leumi-finance.xyz
Appeared in the .xyz zone on Thursday, September 3, 2026; by the end of that day the census found active website. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Page title 'בנק לאומי - כניסה לחשבונך' with username/password form plus an SMS OTP entry step and fake error messages — a credential + 2FA harvesting kit impersonating Bank Leumi on a lookalike 'leumi-finance.xyz' domain the bank does not own.
Domain impersonates Bank Leumi (בנק לאומי, Israel's largest bank) with a typosquat name (leumi-finance.xyz). The page displays a full login form in Hebrew with username, password, and SMS authentication fields—a classic credential-harvesting setup. The combination of brand impersonation, suspicious infrastructure (rare registrar, non-standard nameservers), and functional phishing form confirms malicious intent.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
Same data as JSON: /api/zone/domain/leumi-finance.xyz. This page is not indexed by search engines and does not link to the site it describes.