xyz-vpn.bid
Appeared in the .bid zone on Sunday, August 30, 2026; by the end of that day the census found active website about e-commerce & retail. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Self-branded small Russian-language VPN subscription service (150 ₽/mo) sold via a Telegram bot; the only 'form' is a radio-button plan selector with no credential or payment fields, and 'Telegram' appears solely as the delivery channel, not as an impersonated brand.
The domain XYZ VPN operates under its own brand with a legitimate-looking VPN service model (pricing, subscription tiers, Telegram bot integration for support). However, the sealed-room form pattern (form posting to self with no offsite links), Russian-language operation, use of Telegram for payments and support, and the .bid TLD (associated with abuse) are consistent with a likely payment scam or credential-harvesting operation disguised as a VPN service, rather than impersonation of an establi
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Sunday, August 30, 2026
Same data as JSON: /api/zone/domain/xyz-vpn.bid. This page is not indexed by search engines and does not link to the site it describes.