sonar-robin.xyz
Appeared in the .xyz zone on Saturday, October 17, 2026; by the end of that day the census found active website about finance loans. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
This is a fresh .xyz (NiceNIC) token promo that pushes 'Buy $SONAR', a 'Connect wallet' prompt and holder governance. It leans on 'Robinhood Chain' and a 'robin' domain name for credibility and cites fabricated future market figures ('October 2026'). It uses its own Sonar brand rather than impersonating Robinhood's login, and the only form is a read-only address lookup, so it reads as a crypto lure rather than credential phishing.
The page promotes a cryptocurrency token ($SONAR) and investment tracking service with a form inviting wallet addresses, referencing 'Robinhood Chain' and SEC filings to create false legitimacy. While it uses 'Robinhood' in the page text, it is not impersonating Robinhood (the brokerage) itself—rather, it is a fraudulent DeFi/crypto scheme leveraging brand associations and regulatory reference (SEC) to lure users into connecting wallets or trading a worthless token, which is a scam rather than p
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Saturday, October 17, 2026
Same data as JSON: /api/zone/domain/sonar-robin.xyz. This page is not indexed by search engines and does not link to the site it describes.