Flagged newborn domains, Saturday, September 5, 2026

211 names at tier high or above in .xyz, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalomaslot4now-mobile.xyzscore 82echoes tmobile· active website
one-letter brand typomobile≈tmobilebrand plus digitsomaslot4now-mobileTLD with a high abuse ratexyzbrand name behind Cloudflarecloudflare.com+3 more

Model opinion: looks like abuse, confidence 86%. An opinion, not a finding.

Highchatgpt-free.xyzscore 55echoes chatgpt· parked, for sale
brand in the namechatgptTLD with a high abuse ratexyzbrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLC+1 more

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highcloud-access.xyzscore 55echoes icloud· not probed yet
one-letter brand typocloud≈icloudlure words (login, verify, secure…)accessTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co

Model opinion: suspicious (target: Apple (iCloud)), confidence 62%. An opinion, not a finding.

Highmagicn900-cloudflare.xyzscore 55echoes cloudflare· no DNS
brand in the namecloudflarebrand plus digitsmagicn900-cloudflareTLD with a high abuse ratexyzbrand name at a retail registrarAlibaba Cloud Computing Ltd. d/b/a HiChi+1 more

Model opinion: suspicious (target: Cloudflare), confidence 60%. An opinion, not a finding.

Highpabovebay.xyzscore 55echoes ebay· parked, for sale
brand in the nameebayTLD with a high abuse ratexyzbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Inc+3 more

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highrestructuring-ra-kr-portal-cloud.xyzscore 55echoes icloud· no DNS
one-letter brand typocloud≈icloudlure words (login, verify, secure…)portalmany hyphens4very long name32+4 more

Model opinion: suspicious (target: iCloud), confidence 72%. An opinion, not a finding.

Highrobinhoodreports.xyzscore 55echoes robinhood· registrar placeholder
brand in the namerobinhoodTLD with a high abuse ratexyzbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.+1 more

Model opinion: suspicious (target: Robinhood), confidence 55%. An opinion, not a finding.

Highshopifysspots.xyzscore 55echoes shopify· boilerplate page
brand in the nameshopifyTLD with a high abuse ratexyzbrand name at a retail registrarAtak Domain Bilgi Teknolojileri A.Ş.identical page on many newborns31 identical pages

Model opinion: looks like abuse (target: Shopify), confidence 68%. An opinion, not a finding.

Highusaalertapp.xyzscore 55echoes usaa· not probed yet
brand in the nameusaalure words (login, verify, secure…)alertTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co

Model opinion: suspicious (target: USAA), confidence 72%. An opinion, not a finding.

Highusaalerthub.xyzscore 55echoes usaa· not probed yet
brand in the nameusaalure words (login, verify, secure…)alertTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co

Model opinion: suspicious (target: USAA), confidence 72%. An opinion, not a finding.

Highusaalertswap.xyzscore 55echoes usaa· not probed yet
brand in the nameusaalure words (login, verify, secure…)alert,alertsTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co

Model opinion: suspicious (target: USAA), confidence 72%. An opinion, not a finding.

Highusenolva.xyzscore 54· active website
TLD with a high abuse ratexyzfree DNS providerdnsowl.combrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highbabovebay.xyzscore 52echoes ebay· robots.txt denied
brand in the nameebayTLD with a high abuse ratexyzbrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highbusinessmetafacebook.xyzscore 52echoes facebook· no web server
brand in the namefacebookTLD with a high abuse ratexyzbrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highcusps.xyzscore 52echoes usps· parked, for sale
brand in the nameuspsTLD with a high abuse ratexyzbrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Highfacebookbusiness.xyzscore 52echoes facebook· no web server
brand in the namefacebookTLD with a high abuse ratexyzbrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highfacebookbusinessmeta.xyzscore 52echoes facebook· no web server
brand in the namefacebookTLD with a high abuse ratexyzbrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highlinkedinautoapply.xyzscore 52echoes linkedin· active website
brand in the namelinkedinTLD with a high abuse ratexyzbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGlobal Domain Group LLC
Highmagyar-official.xyzscore 52· redirects elsewhere
lure words (login, verify, secure…)officialTLD with a high abuse ratexyzbrand in page title, not in the namegoogleform on a brand-styled pagehas_form
Highomeglewinners.xyzscore 52· redirects elsewhere
lure words (login, verify, secure…)winnerTLD with a high abuse ratexyzbrand in page title, not in the nametiktokform on a brand-styled pagehas_form
Highpaboveamazon.xyzscore 52echoes amazon· no web server
brand in the nameamazonTLD with a high abuse ratexyzbrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highprinter-robinhood.xyzscore 52echoes robinhood· no DNS
brand in the namerobinhoodTLD with a high abuse ratexyzbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highactivecentervalidationfirstupdateloginshield.xyzscore 50· blocked the probe
lure words (login, verify, secure…)login,update,validationvery long name44TLD with a high abuse ratexyzbrand in page title, not in the namecloudflare
Highcatbie.xyzscore 50· active website
TLD with a high abuse ratexyzpage impersonates a brandCoinbasebrand in page title, not in the nameuniswap

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

lure words (login, verify, secure…)account,confirm,updatevery long name45TLD with a high abuse ratexyzbrand in page title, not in the namecloudflare
Highgatewayshieldupdateglobalaccessvalidation.xyzscore 50· blocked the probe
lure words (login, verify, secure…)access,update,validationvery long name41TLD with a high abuse ratexyzbrand in page title, not in the namecloudflare
Highilongmaoyun.xyzscore 50· active website
TLD with a high abuse ratexyzpage impersonates a brandNetflixbrand in page title, not in the namenetflix
Highoathline.xyzscore 50· active website
TLD with a high abuse ratexyzpage impersonates a brandBinancebrand in page title, not in the namebinance

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Highrapiddefenseprotectionofficialsupportaccess.xyzscore 50· blocked the probe
lure words (login, verify, secure…)access,official,supportvery long name43TLD with a high abuse ratexyzbrand in page title, not in the namecloudflare
Highunipayscan.xyzscore 50· active website
TLD with a high abuse ratexyzpage impersonates a brandPayPalbrand in page title, not in the namepaypal
Highalazadana.xyzscore 48echoes lazada· registrar placeholder
brand in the namelazadaTLD with a high abuse ratexyzbrand name at a retail registrarNics Telekomunikasyon A.S.form on a brand-styled pagehas_form

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highinvisionintuition.xyzscore 48echoes intuit· blocked the probe
brand in the nameintuitTLD with a high abuse ratexyzbrand name at a retail registrarGoDaddy.com, LLCform on a brand-styled pagehas_form
Highaddingmail.xyzscore 46echoes gmail· not probed yet
brand in the namegmailTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highaimingmail.xyzscore 46echoes gmail· not probed yet
brand in the namegmailTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highanalogmail.xyzscore 46echoes gmail· not probed yet
brand in the namegmailTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highapescashapp.xyzscore 46echoes cashapp· not probed yet
brand in the namecashappTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highapplyingmail.xyzscore 46echoes gmail· not probed yet
brand in the namegmailTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highartscashapp.xyzscore 46echoes cashapp· not probed yet
brand in the namecashappTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highassetstripe.xyzscore 46echoes stripe· not probed yet
brand in the namestripeTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highbakingmail.xyzscore 46echoes gmail· not probed yet
brand in the namegmailTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highbeingmail.xyzscore 46echoes gmail· not probed yet
brand in the namegmailTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highbelongmail.xyzscore 46echoes gmail· not probed yet
brand in the namegmailTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highblogcashapp.xyzscore 46echoes cashapp· not probed yet
brand in the namecashappTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highboardlot.xyzscore 46· active website
TLD with a high abuse ratexyzbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form
Highbodycashapp.xyzscore 46echoes cashapp· not probed yet
brand in the namecashappTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highbrewingmail.xyzscore 46echoes gmail· not probed yet
brand in the namegmailTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highbringmail.xyzscore 46echoes gmail· not probed yet
brand in the namegmailTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highbulkcashapp.xyzscore 46echoes cashapp· not probed yet
brand in the namecashappTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highbuyingmail.xyzscore 46echoes gmail· not probed yet
brand in the namegmailTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highcafecashapp.xyzscore 46echoes cashapp· not probed yet
brand in the namecashappTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co

Same data as JSON: /api/zone/risk?day=2026-09-05&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.