xingyu689.xyz
Appeared in the .xyz zone on Friday, September 4, 2026; by the end of that day the census found active website. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Newly-registered .xyz behind Cloudflare serving a Chinese-language 'TG 运营中心' Telegram group automation/mass-messaging panel with a self-posting login at /admin.php; it presents itself as a third-party tool rather than as Telegram itself, so it is not clear-cut brand impersonation, but the Telegram logo/name plus a fresh sealed-room login panel is consistent with grey-market spam tooling or Telegram account harvesting and warrants monitoring.
The domain xingyu689.xyz impersonates Telegram with a fake admin/management platform (page title: 'TG 运营中心 - Telegram 群组自动化运营平台'). The /admin.php endpoint hosts a password form that posts to itself with no offsite links—the classic sealed-room phishing pattern—designed to harvest credentials from users seeking legitimate Telegram group management tools.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Friday, September 4, 2026
Same data as JSON: /api/zone/domain/xingyu689.xyz. This page is not indexed by search engines and does not link to the site it describes.