Flagged newborn domains, Monday, October 26, 2026

244 names at tier low or above in .xyz, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticaluniswapv4.xyzscore 79echoes uniswap· active website
brand in the name “uniswap”brand plus digits “uniswapv4”TLD with a high abuse rate “xyz”brand name and brand-styled page “uniswap”+1 more

Model opinion: looks like a scam (target: Uniswap), confidence 62%. An opinion, not a finding.

Criticalbronzereborn.xyzscore 76· active website
TLD with a high abuse rate “xyz”page asks for credentials “Verify your account”brand in page title, not in the name “roblox”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Criticalrobloxintegrity.xyzscore 71echoes roblox· active website
brand in the name “roblox”TLD with a high abuse rate “xyz”brand name and brand-styled page “roblox”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Roblox), confidence 55%. An opinion, not a finding.

Criticalapple-1ds.xyzscore 64echoes apple· active website
brand in the name “apple”brand plus digits “apple-1ds”TLD with a high abuse rate “xyz”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Apple), confidence 72%. An opinion, not a finding.

Highspotifywork.xyzscore 56echoes spotify· active website
brand in the name “spotify”TLD with a high abuse rate “xyz”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Spotify), confidence 66%. An opinion, not a finding.

Highapple-1xz.xyzscore 55echoes apple· no DNS
brand in the name “apple”brand plus digits “apple-1xz”TLD with a high abuse rate “xyz”brand name at a retail registrar “Gname.com Pte. Ltd.”+1 more
Highds5-apple.xyzscore 55echoes apple· no DNS
brand in the name “apple”brand plus digits “ds5-apple”TLD with a high abuse rate “xyz”brand name at a retail registrar “Gname.com Pte. Ltd.”+1 more
Highlarpingcashapp.xyzscore 55echoes cashapp· empty page
brand in the name “cashapp”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more

Model opinion: looks like phishing (target: Cash App), confidence 70%. An opinion, not a finding.

Highpaypalusd.xyzscore 55echoes paypal· placeholder page
brand in the name “paypal”TLD with a high abuse rate “xyz”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: PayPal), confidence 80%. An opinion, not a finding.

Highzx5-apple.xyzscore 55echoes apple· no DNS
brand in the name “apple”brand plus digits “zx5-apple”TLD with a high abuse rate “xyz”brand name at a retail registrar “Gname.com Pte. Ltd.”+1 more
Highrobinhood-ecosystem.xyzscore 52echoes robinhood· not probed yet
brand in the name “robinhood”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Eranet International Limited”
Hightiktokcoinrecharge.xyzscore 52echoes tiktok· not probed yet
brand in the name “tiktok”TLD with a high abuse rate “xyz”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
High4k-cloud-pro.xyzscore 50echoes icloud· boilerplate page
one-letter brand typo “cloud≈icloud”brand plus digits “4k-cloud-pro”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highcolonyagents.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highfeepilot-global.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “PayPal”brand in page title, not in the name “stripe”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highfinance-transfer.xyzscore 50echoes binance· no DNS
one-letter brand typo “finance≈binance”TLD with a high abuse rate “xyz”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highmilkbao.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Hightidepads.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: suspicious, confidence 53%. An opinion, not a finding.

Highanimejerseys.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highapple-1xs.xyzscore 46echoes apple· no DNS
brand in the name “apple”brand plus digits “apple-1xs”TLD with a high abuse rate “xyz”
Highaskkizlariescort.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Highextractvid.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “instagram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highfirstnamed.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “chatgpt”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 89%. An opinion, not a finding.

Highhipfunds.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highmehedihasandigital.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highnvdainvest.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “nvidia”form on a brand-styled page “has_form”

Model opinion: looks like a scam (target: NVIDIA), confidence 78%. An opinion, not a finding.

Highpaddockagents.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 45%. An opinion, not a finding.

Highshutuplosr.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “authenticator”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highstreamshosting.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 58%. An opinion, not a finding.

Highthirstynft.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 52%. An opinion, not a finding.

Hightriton-id.xyzscore 44· active website
lure words (login, verify, secure…) “id”TLD with a high abuse rate “xyz”page asks for credentials “Verify your identity”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highw-chat.xyzscore 44echoes wechat· excluded
one-letter brand typo “wchat≈wechat”TLD with a high abuse rate “xyz”brand name at a retail registrar “GoDaddy.com, LLC”

Model opinion: looks benign, confidence 65%. An opinion, not a finding.

Mediumsanelias.xyzscore 38· registrar placeholder
TLD with a high abuse rate “xyz”brand in page title, not in the name “hostinger”identical page on many newborns “47 identical pages”
Mediumaksesportalcasio4.xyzscore 34· blocked the probe
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Mediumaksesportalcasio5.xyzscore 34· blocked the probe
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Mediumaksesportalcasio6.xyzscore 34· blocked the probe
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Mediumsupportdock.xyzscore 34· empty page
lure words (login, verify, secure…) “support”TLD with a high abuse rate “xyz”brand in page title, not in the name “whatsapp”
Mediumxn--4gqvd380bmxm29yd5fjj5a.xyzscore 31· parked, for sale
punycode name “这是一个好网站 scripts=CJK”random-looking name “H=4.17”TLD with a high abuse rate “xyz”
Mediumxn--4y2by4c1zf7pi.xyzscore 31· active website
punycode name “재림서버 scripts=HANGUL”random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Medium9channel.xyzscore 30· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Netflix”
Mediumgladiusarena.xyzscore 30· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Coinbase”
Mediumkeypark.xyzscore 30· active website
TLD with a high abuse rate “xyz”page impersonates a brand “MetaMask”
Mediumxxbhbuyh.xyzscore 30· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Netflix”
Mediumxxwjbui.xyzscore 30· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Netflix”
Medium7suparmart.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “namecheap”
Mediumasjvujiapge5k.xyzscore 28· server error
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Mediumb34n5.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “ledger”
Mediumbtsz6sf.xyzscore 28· server error
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Mediumbubblins.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
Mediumbuildwecreate.xyzscore 28· blocked the probe
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”

Same data as JSON: /api/zone/risk?day=2026-10-26&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.