vestedapp.xyz
Appeared in the .xyz zone on Friday, September 11, 2026; by the end of that day the census found active website about saas & tech. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Freshly registered .xyz hosting a crypto token ($VESTED on 'Robinhood Chain') that promises 'tokenized shares' of Spotify, Meta, Microsoft, Google etc. in exchange for screen-time screenshots, with 'LICENSED ISSUER' claims and a 10x-for-24h urgency hook — a classic unregistered-token/airdrop lure rather than any brand login impersonation; the Spotify/Netflix/WhatsApp names are ticker bait, not credential-harvesting portals.
The site presents itself as 'VESTED,' a legitimate-sounding crypto/token platform on Robinhood Chain, not impersonating a specific organisation. However, the core mechanism is a scam: it falsely promises users will earn cryptocurrency (SPOT, META, RBLX, etc.) by sharing screenshots of their activity on third-party services (Spotify, WhatsApp, Netflix, etc.). This is a get-rich-quick fraud that leverages brand names (Netflix, Spotify, WhatsApp) to lend false credibility, but does not impersonate
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Friday, September 11, 2026
Same data as JSON: /api/zone/domain/vestedapp.xyz. This page is not indexed by search engines and does not link to the site it describes.