Highscore 48 · flagged Friday, October 16, 2026

xn--0etv34c.top

Appeared in the .top zone on Friday, October 16, 2026; by the end of that day the census found active website about crypto web3. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

punycode name
matched: 狗少 scripts=CJK
+18
TLD with a high abuse rate
matched: top
+8
page impersonates a brand
matched: MetaMask
+22
Registrar
Spaceship, Inc.
Nameserver provider
Nameservers
becky.ns.cloudflare.com, conrad.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
—
Has a form
no
Brand echoed
—

Model opinions

Second opinionlooks like abuseconfidence 86%· claude-opus-5-5

Punycode .top name (狗少) hosts a Chinese 'NG Casino / 南宫集团 official navigation' link hub that pushes offsite gambling platforms (PC28, slots, live dealer, deposit bonuses like '700返388'). This is an unlicensed-gambling front. The MetaMask, Trust Wallet and Binance entries are download links in a tools section, not a credential-capture impersonation, though the off-site wallet 'official download' links could carry trojanised apps.

First passlooks like abuseconfidence 92%· claude-haiku-4-5

The page is a gambling/casino aggregator portal (unlicensed) disguised as a legitimate tool directory. It lists multiple international casino brands with bonus offers ('700返388'), gambling games (PC28, slots, fishing), and sports betting, mixed deceptively with legitimate cryptocurrency wallets (MetaMask, Trust Wallet, Binance) and VPN tools to obscure its true purpose. The page impersonates a 'NG Casino' official navigation site and links to multiple gambling front domains, indicating coordinat

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Friday, October 16, 2026

Screenshot of xn--0etv34c.top taken by the zone census on 2026-10-16

Same data as JSON: /api/zone/domain/xn--0etv34c.top. This page is not indexed by search engines and does not link to the site it describes.