Flagged newborn domains, Saturday, October 24, 2026

2,476 names at tier low or above in .xyz, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalfacebookvideodownloader.xyzscore 77echoes facebook· active website
brand in the name “facebook”TLD with a high abuse rate “xyz”brand name on a rarely-seen nameserver “webrserver.com”brand name and brand-styled page “facebook”+1 more

Model opinion: looks like abuse (target: Facebook), confidence 60%. An opinion, not a finding.

Criticalcodenexmo.xyzscore 68· active website
TLD with a high abuse rate “xyz”page impersonates a brand “PayPal”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Criticalpornosmovies.xyzscore 68· active website
TLD with a high abuse rate “xyz”page impersonates a brand “netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.

Highbotgmail.xyzscore 52echoes gmail· active website
brand in the name “gmail”TLD with a high abuse rate “xyz”brand name on a rarely-seen nameserver “hostingdunyam.net”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.Ş.”

Model opinion: looks benign, confidence 66%. An opinion, not a finding.

Highgmailtraff.xyzscore 52echoes gmail· empty page
brand in the name “gmail”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.Ş.”

Model opinion: looks like abuse (target: Gmail (Google)), confidence 60%. An opinion, not a finding.

Highgooglesafecdn.xyzscore 52echoes google· no DNS
brand in the name “google”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highintuitmath.xyzscore 52echoes intuit· no DNS
brand in the name “intuit”TLD with a high abuse rate “xyz”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Highgetaegiron.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highmerrymenrh.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks like a scam, confidence 75%. An opinion, not a finding.

Highwhatsapm.xyzscore 50echoes whatsapp· no web server
one-letter brand typo “whatsapm≈whatsapp”TLD with a high abuse rate “xyz”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Higholpn6zjl9wjq507zjlssmbcjibqr1i5x.xyzscore 48echoes smbc· no DNS
brand in the name “smbc”very long name “32”brand plus digits “olpn6zjl9wjq507zjlssmbcjibqr1i5x”TLD with a high abuse rate “xyz”+2 more
High20342034.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

High23845887.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 40%. An opinion, not a finding.

High30546982.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

High40902080.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

High630301.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highanubix.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: looks like a scam (target: Robinhood), confidence 74%. An opinion, not a finding.

Highatril.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 69%. An opinion, not a finding.

Highbumperballs.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: suspicious (target: Robinhood), confidence 72%. An opinion, not a finding.

Highdisneyabudhabi.xyzscore 46echoes disney· not probed yet
brand in the name “disney”TLD with a high abuse rate “xyz”brand name at a retail registrar “GoDaddy.com, LLC”
Highdisneyae.xyzscore 46echoes disney· excluded
brand in the name “disney”TLD with a high abuse rate “xyz”brand name at a retail registrar “GoDaddy.com, LLC”

Model opinion: looks like abuse (target: Disney), confidence 74%. An opinion, not a finding.

Higheclipseal.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: suspicious (target: Robinhood), confidence 72%. An opinion, not a finding.

Highfixmybags.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highguicloud.xyzscore 46echoes icloud· not probed yet
brand in the name “icloud”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highhistripe.xyzscore 46echoes stripe· excluded
brand in the name “stripe”TLD with a high abuse rate “xyz”brand name at a retail registrar “GoDaddy.com, LLC”

Model opinion: suspicious (target: Stripe), confidence 55%. An opinion, not a finding.

Highigrovoyclub95.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “playstation”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Highimarket-mobile.xyzscore 46echoes tmobile· not probed yet
brand in the name “tmobile”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highloveyouallthetime.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highmanekgarden.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highmindeon.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 48%. An opinion, not a finding.

Highoakdigest.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highotaobao.xyzscore 46echoes taobao· not probed yet
brand in the name “taobao”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highoxekeys.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highpetirjp.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 93%. An opinion, not a finding.

Highponsunbox.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highpublicmicrosoft.xyzscore 46echoes microsoft· not probed yet
brand in the name “microsoft”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highpublicwordpress.xyzscore 46echoes wordpress· not probed yet
brand in the name “wordpress”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highreasoningamazon.xyzscore 46echoes amazon· not probed yet
brand in the name “amazon”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highreasoningstripe.xyzscore 46echoes stripe· not probed yet
brand in the name “stripe”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highreconnectmobile.xyzscore 46echoes tmobile· not probed yet
brand in the name “tmobile”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highrevolutionanime.xyzscore 46echoes revolut· not probed yet
brand in the name “revolut”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highrevolutionblaze.xyzscore 46echoes revolut· not probed yet
brand in the name “revolut”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highrevolutiondance.xyzscore 46echoes revolut· not probed yet
brand in the name “revolut”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highrevolutiongames.xyzscore 46echoes revolut· not probed yet
brand in the name “revolut”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highrevolutionmafia.xyzscore 46echoes revolut· not probed yet
brand in the name “revolut”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highrevolutionmagic.xyzscore 46echoes revolut· not probed yet
brand in the name “revolut”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highrevolutionmaker.xyzscore 46echoes revolut· not probed yet
brand in the name “revolut”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highrevolutionnotes.xyzscore 46echoes revolut· not probed yet
brand in the name “revolut”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highrevolutionparts.xyzscore 46echoes revolut· not probed yet
brand in the name “revolut”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highrevolutionpress.xyzscore 46echoes revolut· not probed yet
brand in the name “revolut”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”

Same data as JSON: /api/zone/risk?day=2026-10-24&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.