lotbook.xyz
Appeared in the .xyz zone on Friday, September 25, 2026; by the end of that day the census found active website about e-commerce & retail. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The page is a self-branded 'Lotbook' token-presale launchpad on the real Robinhood Chain; the MetaMask, Trust and Coinbase Wallet deep-links are standard wallet-connect options, not impersonation. Its only offsite link is to the chain's own explorer. A day-old .xyz presale site that asks visitors to connect a wallet and send ETH fits a drainer or rug setup, but it openly states the lots are samples and no sale contract is deployed, so nothing can be bought yet.
Page displays MetaMask wallet connection prompts ('Open in MetaMask', 'Open in Trust Wallet', 'Open in Coinbase Wallet') and uses MetaMask branding to create a sealed-room phishing funnel. The domain impersonates a legitimate DeFi platform while prominently featuring wallet-connection UI designed to capture seed phrases or credentials when users connect via MetaMask. The form posts to itself with no offsite links, matching the classic phishing pattern of harvesting wallet credentials.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Friday, September 25, 2026
Same data as JSON: /api/zone/domain/lotbook.xyz. This page is not indexed by search engines and does not link to the site it describes.