Amusingly, .scam is being applied for.
“SCAM means a dishonest scheme designed to deceive. .SCAM gives people a place to exercise free speech, share warnings and help others spot trouble before it spreads. Turn the word against deception.”
XYZ.COM LLC as applying entity
A real scam would never use that TLD, it would be too obvious. Therefore, you know any .scam website must be legit