Highscore 46 · flagged Sunday, September 13, 2026

plimzo.xyz

Appeared in the .xyz zone on Sunday, September 13, 2026; by the end of that day the census found active website about crypto web3. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: xyz
+8
brand in page title, not in the name
matched: robinhood
+20
form on a brand-styled page
matched: has_form
+18
Registrar
NameCheap, Inc.
Nameserver provider
Nameservers
dns1.registrar-servers.com, dns2.registrar-servers.com
First-day state
active website
HTTP status
200
Page title
PLIMZO — Robinhood Chain Utility Hub
Has a form
yes
Brand echoed

Model opinions

Second opinionlooks like a scamconfidence 62%· claude-opus-5

Brand-new Namecheap .xyz hosting a neon meme-token site ($PLIMZO on 'Robinhood Chain') with CONNECT WALLET buttons, a paid NFT mint sending proceeds to an operator-controlled treasury address, and a disclaimer of affiliation — the classic anonymous crypto token/NFT lure rather than a real service; the Robinhood reference is the chain name, not an impersonation of Robinhood's own portal, so this is fraud-without-impersonation.

First passlooks like phishingtarget: Robinhoodconfidence 85%· claude-haiku-4-5

The page title claims 'PLIMZO — Robinhood Chain Utility Hub' and repeatedly invokes 'Robinhood Chain' to establish false authority, but plimzo.xyz is not owned by or affiliated with Robinhood. The 'CONNECT WALLET' button and token scanner form are designed to capture wallet credentials and contract interaction data from users deceived into trusting a Robinhood-branded interface. The sealed-room form (posting to self with no verification links to actual Robinhood infrastructure) and explicit wall

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Sunday, September 13, 2026

Screenshot of plimzo.xyz taken by the zone census on 2026-09-13

Same data as JSON: /api/zone/domain/plimzo.xyz. This page is not indexed by search engines and does not link to the site it describes.