Highscore 50 · flagged Thursday, November 12, 2026

plumemailing.xyz

Appeared in the .xyz zone on Thursday, November 12, 2026; by the end of that day the census found active website about crypto web3. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: xyz
+8
page impersonates a brand
matched: Binance
+22
brand in page title, not in the name
matched: binance
+20
Registrar
Name.com, Inc.
Nameserver provider
Nameservers
ns1hwy.name.com, ns2fln.name.com, ns3fqs.name.com, ns4jnz.name.com
First-day state
active website
HTTP status
200
Page title
SaaS Mailing — Campagnes e-mail pour 25 USDT par mois
Has a form
no
Brand echoed
—

Model opinions

First passsuspiciousconfidence 65%· claude-haiku-4-5

The page presents itself as a legitimate SaaS email marketing platform with its own branding ('SaaS Mailing'), pricing, and feature descriptions. While it mentions 'Binance Pay' as a payment method and accepts USDT, this is a payment processor integration rather than impersonation of Binance itself. The domain name 'plumemailing.xyz' does not directly impersonate a known brand. However, the combination of a newly-registered .xyz domain, cryptocurrency-only payment, minimal offsite links, and the

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Thursday, November 12, 2026

Screenshot of plumemailing.xyz taken by the zone census on 2026-11-12

Same data as JSON: /api/zone/domain/plumemailing.xyz. This page is not indexed by search engines and does not link to the site it describes.