Flagged newborn domains, Saturday, August 29, 2026

180 names at tier medium or above in .xyz, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalcommunityvotebinance.xyzscore 89echoes binance· active website
brand in the namebinanceTLD with a high abuse ratexyzbrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc+2 more

Model opinion: looks like phishing (target: Binance), confidence 94%. An opinion, not a finding.

Criticallcloud-alert.xyzscore 82echoes icloud· active website
one-letter brand typolcloud≈icloudlure words (login, verify, secure…)alertTLD with a high abuse ratexyzbrand name behind Cloudflarecloudflare.com+2 more

Model opinion: looks like abuse (target: Apple (iCloud)), confidence 66%. An opinion, not a finding.

Criticallloyds-solace.xyzscore 64echoes lloyds· active website
brand in the namelloydsTLD with a high abuse ratexyzbrand name at a retail registrarGoDaddy.com, LLCform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 78%. An opinion, not a finding.

Highkwg-mobile.xyzscore 55echoes tmobile· registrar placeholder
one-letter brand typomobile≈tmobileTLD with a high abuse ratexyzbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.+1 more

Model opinion: suspicious, confidence 45%. An opinion, not a finding.

Highxn--ita777-rya.xyzscore 55echoes itau· not probed yet
punycode nameitaú777 scripts=LATINbrand in the nameitaubrand plus digitsitau777TLD with a high abuse ratexyz+1 more
Hightrybucket.xyzscore 54· active website
TLD with a high abuse ratexyzfree DNS providerdnsowl.combrand in page title, not in the nameuniswapform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highbestsmmsite.xyzscore 50· active website
TLD with a high abuse ratexyzpage impersonates a brandBinancebrand in page title, not in the namefacebook

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highoutloook.xyzscore 50echoes outlook· not probed yet
one-letter brand typooutloook≈outlookTLD with a high abuse ratexyzbrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highponsguy.xyzscore 50· active website
TLD with a high abuse ratexyzpage impersonates a brandMETAMASKbrand in page title, not in the namerobinhood

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

High993124321.xyzscore 46· parked, for sale
TLD with a high abuse ratexyzbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 66%. An opinion, not a finding.

Highapp-allox.xyzscore 46· blocked the probe
TLD with a high abuse ratexyzbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highbapalpha.xyzscore 46· redirects elsewhere
TLD with a high abuse ratexyzbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highbilltrades.xyzscore 46· redirects elsewhere
TLD with a high abuse ratexyzbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highblue-pear.xyzscore 46· redirects elsewhere
TLD with a high abuse ratexyzbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highff097or.xyzscore 46· redirects elsewhere
TLD with a high abuse ratexyzbrand in page title, not in the namefacebookform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highff097pos.xyzscore 46· redirects elsewhere
TLD with a high abuse ratexyzbrand in page title, not in the namefacebookform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highff168hor.xyzscore 46· redirects elsewhere
TLD with a high abuse ratexyzbrand in page title, not in the namefacebookform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highff168kor.xyzscore 46· redirects elsewhere
TLD with a high abuse ratexyzbrand in page title, not in the namefacebookform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highff18oui.xyzscore 46· redirects elsewhere
TLD with a high abuse ratexyzbrand in page title, not in the namefacebookform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highff444mors.xyzscore 46· redirects elsewhere
TLD with a high abuse ratexyzbrand in page title, not in the namefacebookform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highff444ois.xyzscore 46· redirects elsewhere
TLD with a high abuse ratexyzbrand in page title, not in the namefacebookform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highgiftur.xyzscore 46· active website
TLD with a high abuse ratexyzbrand in page title, not in the namenvidiaform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highgreen-plum.xyzscore 46· redirects elsewhere
TLD with a high abuse ratexyzbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highinstagramstories.xyzscore 46echoes instagram· not probed yet
brand in the nameinstagramTLD with a high abuse ratexyzbrand name at a retail registrarGoDaddy.com, LLC
Highponshook.xyzscore 46· placeholder page
TLD with a high abuse ratexyzbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 55%. An opinion, not a finding.

Highstorerx.xyzscore 46· active website
TLD with a high abuse ratexyzbrand in page title, not in the nameshopifyform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Hightickronhood.xyzscore 46· active website
TLD with a high abuse ratexyzbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highmetaask.xyzscore 44echoes metamask· not probed yet
one-letter brand typometaask≈metamaskTLD with a high abuse ratexyzbrand name at a retail registrarGoDaddy.com, LLC
Mediumrechargehub-offers.xyzscore 38· active website
TLD with a high abuse ratexyzpage asks for credentialsLogin to Account
Mediumstockledge.xyzscore 36· redirects elsewhere
TLD with a high abuse ratexyzfree DNS providerdnsowl.combrand in page title, not in the nameledger
Mediumuseselvo.xyzscore 36· active website
TLD with a high abuse ratexyzfree DNS providerdnsowl.combrand in page title, not in the namerobinhood
Mediumbonuses-for-bets.xyzscore 34· server error
lure words (login, verify, secure…)bonusTLD with a high abuse ratexyzbrand in page title, not in the namecloudflare
Mediumxn--fjqwm205bgkv9faa.xyzscore 31· robots.txt denied
punycode name快乐的皮皮仙 scripts=CJKrandom-looking nameH=3.95TLD with a high abuse ratexyz
Mediumxn--h6qx8vgeb1996bq5w.xyzscore 31· no web server
punycode name美家金宅家具 scripts=CJKrandom-looking nameH=3.72TLD with a high abuse ratexyz
Mediumbrandmymac.xyzscore 30· active website
TLD with a high abuse ratexyzpage impersonates a brandPayPal
Mediumchatcl.xyzscore 30· active website
TLD with a high abuse ratexyzpage impersonates a brandCoinbase
Mediumcpplt.xyzscore 30· active website
TLD with a high abuse ratexyzpage impersonates a brandMetaMask
Mediumderyveagents.xyzscore 30· active website
TLD with a high abuse ratexyzpage impersonates a brandMetaMask
Mediumkitecanvas.xyzscore 30· active website
TLD with a high abuse ratexyzpage impersonates a brandMetaMask
Mediumletsescrow.xyzscore 30· active website
TLD with a high abuse ratexyzpage impersonates a brandPayPal
Mediummaplebeat.xyzscore 30· active website
TLD with a high abuse ratexyzpage impersonates a brandMetaMask
Medium595926.xyzscore 28· blocked the probe
TLD with a high abuse ratexyzbrand in page title, not in the namecloudflare
Medium90ir.xyzscore 28· blocked the probe
TLD with a high abuse ratexyzbrand in page title, not in the namecloudflare
Mediumace96vip.xyzscore 28· active website
TLD with a high abuse ratexyzbrand in page title, not in the nametelegram
Mediumagenticliquidity.xyzscore 28· redirect not followed
TLD with a high abuse ratexyzbrand in page title, not in the namerobinhood
Mediumagentxhood.xyzscore 28· active website
TLD with a high abuse ratexyzbrand in page title, not in the namerobinhood
Mediumalleidbd.xyzscore 28· active website
TLD with a high abuse ratexyzbrand in page title, not in the namewordpress
Mediumapepack101.xyzscore 28· active website
TLD with a high abuse ratexyzbrand in page title, not in the namerobinhood
Mediumapesol.xyzscore 28· active website
TLD with a high abuse ratexyzbrand in page title, not in the nametelegram
Mediumapesyndicates.xyzscore 28· active website
TLD with a high abuse ratexyzbrand in page title, not in the namerobinhood

Same data as JSON: /api/zone/risk?day=2026-08-29&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.