.xyz TLD audit hub
Cheap, unrestricted gTLD that gained traction with crypto, web3 and budget-conscious projects.
The .xyz TLD launched in 2014 and grew rapidly through aggressive registrar promotions — many registrars offer first-year .xyz registrations under $1, which has caused both legitimate adoption and persistent abuse problems. Famously Alphabet's holding company chose abc.xyz when it spun out from Google in 2015, lending the namespace mainstream credibility. The adopter mix is bifurcated: serious projects (Ethereum-related sites, cryptocurrency wallets, web3 products) on one side, and a long tail of aggressively-priced spam, throwaway phishing infrastructure and SEO doorways on the other. That mix means email deliverability heuristics treat .xyz with caution by default — Spamhaus, Cisco Talos, and several enterprise gateway vendors have at various points applied namespace-level reputation penalties — so brands that adopt .xyz must invest more in SPF, DKIM and DMARC alignment to break out of the cohort. Search engines have historically applied no explicit ranking penalty for .xyz, but click-through and trust signals from users skew lower than for legacy gTLDs. Our reports flag this when scoring email deliverability on .xyz domains.