Highscore 56 · flagged Saturday, October 31, 2026

nexitallysecure.homes

Appeared in the .homes zone on Saturday, October 31, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

lure words (login, verify, secure…)
matched: secure
+6
TLD with a high abuse rate
matched: homes
+8
page impersonates a brand
matched: Netflix
+22
brand in page title, not in the name
matched: disney
+20
Registrar
Spaceship, Inc.
Nameserver provider
Nameservers
olga.ns.cloudflare.com, piotr.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
Nexitally 奶昔机场官网 - 2026顶级IEPL内网专线机场推荐 | 全球稳定节点加速
Has a form
no
Brand echoed
—

Model opinions

Second opinionsuspiciousconfidence 55%· claude-opus-5-5

The page is a keyword-stuffed Chinese SEO landing page for the Nexitally VPN/proxy ('机场') service, and every signup link funnels offsite to vip06.flyvaff.com. Netflix and Disney+ appear only as streaming services it unlocks, so they are not being impersonated, and there is no form. It is unclear whether this throwaway .homes site is genuinely Nexitally's 'official' site, as it claims, or an affiliate or squat using the name.

First passlooks like abuseconfidence 92%· claude-haiku-4-5

Nexitally is a legitimate VPN/proxy service (奶昔机场 - 'milkshake airport') with its own brand and infrastructure; the domain name does not impersonate another organization. However, the scorer flagged brand-impersonation of Netflix and Disney in page text, which is misleading—the page merely lists Netflix/Disney+ as services the VPN can unlock (a common feature advertisement for such services), not impersonation of those brands. The real issue is that this is a VPN/proxy service domain registered

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Saturday, October 31, 2026

Screenshot of nexitallysecure.homes taken by the zone census on 2026-10-31

Same data as JSON: /api/zone/domain/nexitallysecure.homes. This page is not indexed by search engines and does not link to the site it describes.