Highscore 47 · flagged Saturday, September 26, 2026

3dqianxishijihaokaijihaoduiyingmaguanzhu1u.casa

Appeared in the .casa zone on Saturday, September 26, 2026; by the end of that day the census found not probed yet. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand spelled with digits
matched: 3dqianxishijihaokaijihaoduiyingmaguanzhu1u→hulu
+35
very long name
matched: 42
+4
brand plus digits
matched: 3dqianxishijihaokaijihaoduiyingmaguanzhu1u
+8
Registrar
—
Nameserver provider
Nameservers
ns1.dyna-ns.net, ns2.dyna-ns.net
First-day state
not probed yet
HTTP status
—
Page title
—
Has a form
no
Brand echoed
hulu

Model opinions

First passsuspicioustarget: Huluconfidence 65%· claude-haiku-4-5

The domain name contains a Hulu brand signal (leet-speak decoding to 'hulu') combined with digits and extreme length (42 characters), which is consistent with typosquat infrastructure. However, without page content, form, or server response, the absence of any actual phishing mechanism (login form, credential capture attempt) prevents a definitive phishing verdict.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

Same data as JSON: /api/zone/domain/3dqianxishijihaokaijihaoduiyingmaguanzhu1u.casa. This page is not indexed by search engines and does not link to the site it describes.