rn285nexo.xyz
Appeared in the .xyz zone on Thursday, September 10, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Random-looking .xyz name behind Cloudflare NS that serves no content of its own and blanket-redirects to www.google.com — a classic cloaking/holding pattern for a campaign that shows real content only to targeted visitors; the Google branding and search form belong to the redirect destination, not this domain, so there is no impersonation evidence yet. The 'nexo' token (crypto brand Nexo) with a random 'rn285' prefix is weakly suggestive but not decisive.
The domain rn285nexo.xyz is a random alphanumeric typosquat registered at Name.com with Cloudflare nameservers, configured to redirect to www.google.com. The domain name itself has no legitimate purpose and serves only as a redirect vehicle—it does not host content, and the redirect pattern is consistent with SEO manipulation or traffic hijacking infrastructure rather than direct phishing. The typosquat name and redirect-only setup indicate abuse (squat infrastructure) rather than impersonation
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Thursday, September 10, 2026
Same data as JSON: /api/zone/domain/rn285nexo.xyz. This page is not indexed by search engines and does not link to the site it describes.