Flagged newborn domains, Wednesday, October 21, 2026

6,533 names at tier low or above in .xyz, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical1ordfilms.xyzscore 68· active website
TLD with a high abuse rate “xyz”page impersonates a brand “netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.

Criticalrealaurorarobinhood.xyzscore 60echoes robinhood· active website
brand in the name “robinhood”TLD with a high abuse rate “xyz”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”+1 more

Model opinion: looks like a scam (target: Robinhood), confidence 74%. An opinion, not a finding.

Highcchatgpt.xyzscore 55echoes chatgpt· no DNS
brand in the name “chatgpt”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more

Model opinion: suspicious (target: OpenAI (ChatGPT)), confidence 65%. An opinion, not a finding.

Highcloudflare-saas.xyzscore 55echoes cloudflare· not probed yet
brand in the name “cloudflare”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more

Model opinion: suspicious (target: cloudflare), confidence 59%. An opinion, not a finding.

Highgoogleservices.xyzscore 55echoes google· not probed yet
brand in the name “google”lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “xyz”

Model opinion: suspicious (target: google), confidence 83%. An opinion, not a finding.

Highirecovert-idcloud.xyzscore 55echoes icloud· robots.txt denied
one-letter brand typo “idcloud≈icloud”lure words (login, verify, secure…) “recover”TLD with a high abuse rate “xyz”

Model opinion: suspicious (target: Apple), confidence 72%. An opinion, not a finding.

Highlinemembership.xyzscore 55echoes lineme· not probed yet
brand in the name “lineme”lure words (login, verify, secure…) “member,members”TLD with a high abuse rate “xyz”

Model opinion: suspicious, confidence 76%. An opinion, not a finding.

Highmytrezor.xyzscore 55echoes trezor· parked, for sale
brand in the name “trezor”TLD with a high abuse rate “xyz”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Trezor), confidence 80%. An opinion, not a finding.

Highnintendoportal.xyzscore 55echoes nintendo· not probed yet
brand in the name “nintendo”lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”

Model opinion: suspicious (target: nintendo), confidence 81%. An opinion, not a finding.

Highofficialstripe.xyzscore 55echoes stripe· not probed yet
brand in the name “stripe”lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”

Model opinion: suspicious (target: stripe), confidence 78%. An opinion, not a finding.

Highrevolutionworlds.xyzscore 55echoes revolut· robots.txt denied
brand in the name “revolut”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”+1 more

Model opinion: suspicious (target: revolut), confidence 52%. An opinion, not a finding.

Hightiktok-mod-skachat.xyzscore 55echoes tiktok· redirects elsewhere
brand in the name “tiktok”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “tiktok”

Model opinion: looks like abuse (target: TikTok), confidence 85%. An opinion, not a finding.

Highcloudflare-bot.xyzscore 52echoes cloudflare· no DNS
brand in the name “cloudflare”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Global Domain Group LLC”

Model opinion: suspicious (target: cloudflare), confidence 47%. An opinion, not a finding.

Highexpeda.xyzscore 52echoes expedia· parked, for sale
one-letter brand typo “expeda≈expedia”TLD with a high abuse rate “xyz”brand name at a retail registrar “NicNames, Inc.”brand name redirects elsewhere “nic.ua”

Model opinion: looks like abuse (target: Expedia), confidence 70%. An opinion, not a finding.

Highnetflixtoto24jam.xyzscore 52echoes netflix· no DNS
brand in the name “netflix”brand plus digits “netflixtoto24jam”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks like abuse (target: Netflix), confidence 70%. An opinion, not a finding.

Highrevolutioncasino.xyzscore 52echoes revolut· no DNS
brand in the name “revolut”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “URL Solutions, Inc.”

Model opinion: unreachable when judged, confidence 72%. An opinion, not a finding.

Highstardashvpn.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

High40664443.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

High43055579.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

High51043425.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

High61433729.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

High61944507.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

High83825034.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highallocation-astredex.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highallocations-aero.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious (target: Aerodrome Finance), confidence 60%. An opinion, not a finding.

Highamazoniapg.xyzscore 46echoes amazon· excluded
brand in the name “amazon”TLD with a high abuse rate “xyz”brand name at a retail registrar “GoDaddy.com, LLC”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highdronewordpress.xyzscore 46echoes wordpress· not probed yet
brand in the name “wordpress”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highearliestmobile.xyzscore 46echoes tmobile· not probed yet
brand in the name “tmobile”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highebookwordpress.xyzscore 46echoes wordpress· not probed yet
brand in the name “wordpress”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highelephantmobile.xyzscore 46echoes tmobile· not probed yet
brand in the name “tmobile”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Higheloquentmobile.xyzscore 46echoes tmobile· not probed yet
brand in the name “tmobile”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highethereumdisney.xyzscore 46echoes disney· not probed yet
brand in the name “disney”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highethereumgoogle.xyzscore 46echoes google· not probed yet
brand in the name “google”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highetherwordpress.xyzscore 46echoes wordpress· not probed yet
brand in the name “wordpress”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Higheyesightmobile.xyzscore 46echoes tmobile· not probed yet
brand in the name “tmobile”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highfeministmobile.xyzscore 46echoes tmobile· not probed yet
brand in the name “tmobile”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highfragmentmobile.xyzscore 46echoes tmobile· not probed yet
brand in the name “tmobile”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highfrequentmobile.xyzscore 46echoes tmobile· not probed yet
brand in the name “tmobile”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highgooglecommerce.xyzscore 46echoes google· not probed yet
brand in the name “google”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highgoogleethereum.xyzscore 46echoes google· not probed yet
brand in the name “google”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highgoogleoptimize.xyzscore 46echoes google· not probed yet
brand in the name “google”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highgradientmobile.xyzscore 46echoes tmobile· not probed yet
brand in the name “tmobile”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highgreatestmobile.xyzscore 46echoes tmobile· not probed yet
brand in the name “tmobile”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highhowibecomeamillionaire.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “chatgpt”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highhypermicrosoft.xyzscore 46echoes microsoft· not probed yet
brand in the name “microsoft”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highhyperwordpress.xyzscore 46echoes wordpress· not probed yet
brand in the name “wordpress”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highimplicitmobile.xyzscore 46echoes tmobile· not probed yet
brand in the name “tmobile”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highincidentmobile.xyzscore 46echoes tmobile· not probed yet
brand in the name “tmobile”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highinferencerouting.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “openai”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 86%. An opinion, not a finding.

Highinstawordpress.xyzscore 46echoes wordpress· not probed yet
brand in the name “wordpress”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”

Same data as JSON: /api/zone/risk?day=2026-10-21&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.