Flagged newborn domains, Monday, August 31, 2026

280 names at tier medium or above in .xyz, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalcloud-privacy.xyzscore 96echoes icloud· active website
one-letter brand typocloud≈icloudTLD with a high abuse ratexyzbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Inc+3 more

Model opinion: looks like abuse, confidence 66%. An opinion, not a finding.

Highamericaexpress.xyzscore 55echoes americanexpress· placeholder page
one-letter brand typoamericaexpress≈americanexpressTLD with a high abuse ratexyzbrand name at a retail registrarİsimtescil Bilişim A.Ş.form on a brand-styled pagehas_form

Model opinion: looks like abuse (target: American Express), confidence 60%. An opinion, not a finding.

Highfinance-onhood.xyzscore 55echoes binance· other
one-letter brand typofinance≈binanceTLD with a high abuse ratexyzbrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.+1 more

Model opinion: unreachable when judged, confidence 78%. An opinion, not a finding.

Highreslack.xyzscore 55echoes slack· boilerplate page
brand in the nameslackTLD with a high abuse ratexyzbrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc+1 more

Model opinion: looks benign, confidence 87%. An opinion, not a finding.

Highwhtsapp-security.xyzscore 55echoes whatsapp· no web server
one-letter brand typowhtsapp≈whatsapplure words (login, verify, secure…)securityTLD with a high abuse ratexyzbrand name at a retail registrarOVH sas
Highxn--godaddy-7v7lj08f8h6bzfnhumqyc1wi.xyzscore 55echoes godaddy· blocked the probe
punycode name自耵godaddy网站生成器 scripts=CJK/LATINbrand in the namegodaddyTLD with a high abuse ratexyzbrand name at a retail registrarGoDaddy.com, LLC+1 more
Highitau777.xyzscore 54echoes itau· active website
brand in the nameitaubrand plus digitsitau777TLD with a high abuse ratexyzbrand name at a retail registrarGoDaddy.com, LLC

Model opinion: looks like abuse (target: Itaú Unibanco), confidence 80%. An opinion, not a finding.

Highfundexrobinhood.xyzscore 52echoes robinhood· server error
brand in the namerobinhoodTLD with a high abuse ratexyzbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.

Model opinion: looks like abuse (target: Robinhood), confidence 62%. An opinion, not a finding.

Highmeviononrobinhood.xyzscore 52echoes robinhood· server error
brand in the namerobinhoodTLD with a high abuse ratexyzbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highmultiplifi-airdrop.xyzscore 52· blocked the probe
lure words (login, verify, secure…)airdropTLD with a high abuse ratexyzbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highnet24webacesso-loginpublico.xyzscore 52· redirects elsewhere
lure words (login, verify, secure…)loginTLD with a high abuse ratexyzbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 66%. An opinion, not a finding.

Highoptimumonrobinhood.xyzscore 52echoes robinhood· server error
brand in the namerobinhoodTLD with a high abuse ratexyzbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highponponrobinhood.xyzscore 52echoes robinhood· active website
brand in the namerobinhoodTLD with a high abuse ratexyzbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.

Model opinion: looks like a scam, confidence 62%. An opinion, not a finding.

Highquonsrobinhood.xyzscore 52echoes robinhood· server error
brand in the namerobinhoodTLD with a high abuse ratexyzbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.

Model opinion: suspicious (target: Robinhood), confidence 60%. An opinion, not a finding.

Highbsccatcoin.xyzscore 50· active website
TLD with a high abuse ratexyzpage impersonates a brandBinancebrand in page title, not in the namebinance
Highponpe.xyzscore 50· active website
TLD with a high abuse ratexyzpage impersonates a brandMetaMaskbrand in page title, not in the namerobinhood

Model opinion: looks like a scam, confidence 56%. An opinion, not a finding.

High028881.xyzscore 46· redirects elsewhere
TLD with a high abuse ratexyzbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

High1800132.xyzscore 46· redirects elsewhere
TLD with a high abuse ratexyzbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

High4430420.xyzscore 46· redirects elsewhere
TLD with a high abuse ratexyzbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

High50607040.xyzscore 46· redirects elsewhere
TLD with a high abuse ratexyzbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highagentsn.xyzscore 46· active website
TLD with a high abuse ratexyzbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highantsai.xyzscore 46· redirects elsewhere
TLD with a high abuse ratexyzbrand in page title, not in the nameshopifyform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highbrutegazelle.xyzscore 46echoes zelle· no web server
brand in the namezelleTLD with a high abuse ratexyzbrand name at a retail registrarGoDaddy.com, LLC
Highcellonrobinhood.xyzscore 46echoes robinhood· server error
brand in the namerobinhoodTLD with a high abuse ratexyzbrand name at a retail registrarName.com, Inc.

Model opinion: suspicious (target: Robinhood), confidence 65%. An opinion, not a finding.

Highegorobinhood.xyzscore 46echoes robinhood· active website
brand in the namerobinhoodTLD with a high abuse ratexyzbrand name at a retail registrarName.com, Inc.

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highegressonrobinhood.xyzscore 46echoes robinhood· server error
brand in the namerobinhoodTLD with a high abuse ratexyzbrand name at a retail registrarName.com, Inc.

Model opinion: suspicious (target: Robinhood), confidence 65%. An opinion, not a finding.

Highmarabout-daddy.xyzscore 46· active website
TLD with a high abuse ratexyzbrand in page title, not in the namewhatsappform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highmarabout-nfa.xyzscore 46· active website
TLD with a high abuse ratexyzbrand in page title, not in the namewhatsappform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 70%. An opinion, not a finding.

Highmidirectorio.xyzscore 46· active website
TLD with a high abuse ratexyzbrand in page title, not in the namewhatsappform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highmsasadenterprise.xyzscore 46· active website
TLD with a high abuse ratexyzbrand in page title, not in the nameledgerform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highneuralevm.xyzscore 46· active website
TLD with a high abuse ratexyzbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 75%. An opinion, not a finding.

Highpiapia.xyzscore 46· redirects elsewhere
TLD with a high abuse ratexyzbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highpodlings.xyzscore 46· active website
TLD with a high abuse ratexyzbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highponsstreetbets.xyzscore 46· active website
TLD with a high abuse ratexyzbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highprofesseur-gbetoho.xyzscore 46· active website
TLD with a high abuse ratexyzbrand in page title, not in the namewhatsappform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 55%. An opinion, not a finding.

Highrevolutiondumpster.xyzscore 46echoes revolut· no web server
brand in the namerevolutTLD with a high abuse ratexyzbrand name at a retail registrarGoDaddy.com, LLC
Hightc-cloud.xyzscore 44echoes icloud· no DNS
one-letter brand typocloud≈icloudTLD with a high abuse ratexyzbrand name at a retail registrarAceville Pte. Ltd.
Mediuminvectmachine.xyzscore 36· active website
TLD with a high abuse ratexyzfree DNS providerdnsowl.combrand in page title, not in the namerobinhood
Mediumordoliquidity.xyzscore 36· active website
TLD with a high abuse ratexyzfree DNS providerdnsowl.combrand in page title, not in the namerobinhood
Mediumprivacy-access.xyzscore 36· active website
lure words (login, verify, secure…)accessTLD with a high abuse ratexyzpage impersonates a brandPayPal
Mediumtickermachine.xyzscore 36· active website
TLD with a high abuse ratexyzfree DNS providerdnsowl.combrand in page title, not in the namerobinhood
Mediumvestfloor.xyzscore 36· active website
TLD with a high abuse ratexyzfree DNS providerdnsowl.combrand in page title, not in the nameopensea
Mediumvoxelithic.xyzscore 36· active website
TLD with a high abuse ratexyzfree DNS providerdnsowl.combrand in page title, not in the namerobinhood
Mediumxn--6frw1skyszudbzp4xd3sog4g96d.xyzscore 35· active website
punycode name超自然行动申诉官网 scripts=CJKvery long name31random-looking nameH=4.19TLD with a high abuse ratexyz
Mediumxn--89q08b034avc032d2obz7eo04i.xyzscore 35· redirects elsewhere
punycode name点击领取新澳特料 scripts=CJKvery long name30random-looking nameH=4.09TLD with a high abuse ratexyz
Mediumxn--mcrs8m765c0ke.xyzscore 31· no DNS
punycode name轻钢别墅 scripts=CJKrandom-looking nameH=3.64TLD with a high abuse ratexyz
Medium2kcv.xyzscore 30· active website
TLD with a high abuse ratexyzpage impersonates a brandPAYPAL
Medium365xywh.xyzscore 30· active website
TLD with a high abuse ratexyzpage impersonates a brandBINANCE
Mediumgraffitiforge.xyzscore 30· active website
TLD with a high abuse ratexyzpage impersonates a brandMetaMask
Mediumketua268pro.xyzscore 30· active website
TLD with a high abuse ratexyzpage impersonates a brandNetflix

Same data as JSON: /api/zone/risk?day=2026-08-31&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.