Flagged newborn domains, Wednesday, October 28, 2026

47 names at tier high or above in .xyz, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalbigbinanceballs.xyzscore 83echoes binance· active website
brand in the name “binance”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”page impersonates a brand “BINANCE”+2 more

Model opinion: looks like a scam (target: Binance), confidence 75%. An opinion, not a finding.

Criticaldefibkk.xyzscore 68· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Binance”brand in page title, not in the name “binance”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Highrobloxshader.xyzscore 59echoes roblox· active website
brand in the name “roblox”TLD with a high abuse rate “xyz”brand name on a rarely-seen nameserver “poyrazhosting.com”brand name and brand-styled page “roblox”

Model opinion: looks like abuse (target: Roblox), confidence 86%. An opinion, not a finding.

Highclementinebay.xyzscore 55echoes ebay· empty page
brand in the name “ebay”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highfacebookgifs.xyzscore 55echoes facebook· not probed yet
brand in the name “facebook”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Highgoogle-site-verificationfqwlvnbunu2dg04kmftcoq36z0oatfm5kdo.xyzscore 55echoes google· not probed yet
brand in the name “google”lure words (login, verify, secure…) “verification”very long name “59”brand plus digits “google-site-verificationfqwlvnbunu2dg04k”+2 more
Highinstagram-giris.xyzscore 55echoes instagram· registrar placeholder
brand in the name “instagram”TLD with a high abuse rate “xyz”brand name and brand-styled page “instagram”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Instagram), confidence 85%. An opinion, not a finding.

Highagroinc.xyzscore 52· active website
TLD with a high abuse rate “xyz”page asks for credentials “Login to your account”login form “has_form+login words”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highconsumer-finance.xyzscore 52echoes binance· boilerplate page
one-letter brand typo “finance≈binance”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”identical page on many newborns “159 identical pages”

Model opinion: unreachable when judged, confidence 60%. An opinion, not a finding.

Hightb-bonusclub.xyzscore 52· blocked the probe
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
High15team.xyzscore 51echoes steam· no DNS
brand spelled with digits “15team→steam”brand plus digits “15team”TLD with a high abuse rate “xyz”
Highagentfronk.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highcloud-encontrar-ios.xyzscore 50echoes icloud· robots.txt denied
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”brand name on a rarely-seen nameserver “vipprorecord.pro”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.Ş.”
Highcloud-find-ios.xyzscore 50echoes icloud· robots.txt denied
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”brand name on a rarely-seen nameserver “vipprorecord.pro”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.Ş.”
Highonline-medcentr6.xyzscore 50echoes lineme· blocked the probe
brand in the name “lineme”brand plus digits “online-medcentr6”TLD with a high abuse rate “xyz”brand name on a rarely-seen nameserver “owlhost.net”+2 more
Highreapo.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “MetaMask”brand in page title, not in the name “robinhood”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

High07241916.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highacessorapido.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: WhatsApp), confidence 93%. An opinion, not a finding.

Highamazonassociates.xyzscore 46echoes amazon· empty page
brand in the name “amazon”TLD with a high abuse rate “xyz”brand name at a retail registrar “Global Domain Group LLC”

Model opinion: looks like abuse (target: Amazon), confidence 70%. An opinion, not a finding.

Highanthropicu.xyzscore 46echoes anthropic· blocked the probe
brand in the name “anthropic”TLD with a high abuse rate “xyz”brand name redirects elsewhere “dynadot.com”
Highauthcashapp.xyzscore 46echoes cashapp· not probed yet
brand in the name “cashapp”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highautocashapp.xyzscore 46echoes cashapp· not probed yet
brand in the name “cashapp”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highbeyrivals.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “roblox”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highbuenanota.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 40%. An opinion, not a finding.

Highcareervanguard.xyzscore 46echoes vanguard· not probed yet
brand in the name “vanguard”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highcashwordpress.xyzscore 46echoes wordpress· not probed yet
brand in the name “wordpress”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highcenterstripe.xyzscore 46echoes stripe· not probed yet
brand in the name “stripe”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highdefinitelynotarcade.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highdesktopit.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highfeedsmelt.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highgetcoinable.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Highidlewharf.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”
Highkyadhc.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: suspicious (target: Robinhood), confidence 72%. An opinion, not a finding.

Highmolyads.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 66%. An opinion, not a finding.

Highnamasteveryo.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “booking”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Highordiq.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “uniswap”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highplaystampede.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 70%. An opinion, not a finding.

Highprimestripe.xyzscore 46echoes stripe· not probed yet
brand in the name “stripe”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highsolariss.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Hightanhanest.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 58%. An opinion, not a finding.

Highwanderatlas.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “booking”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 66%. An opinion, not a finding.

Highwanderveil.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “apple”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 81%. An opinion, not a finding.

Highxwizgmail.xyzscore 46echoes gmail· not probed yet
brand in the name “gmail”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highyanhuoai.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “openai”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highyhzigmail.xyzscore 46echoes gmail· not probed yet
brand in the name “gmail”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highzhijianzhongyi-2026.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 40%. An opinion, not a finding.

Highubicacion-icloudfind.xyzscore 40echoes icloud· boilerplate page
brand in the name “icloud”TLD with a high abuse rate “xyz”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.Ş.”identical page on many newborns “47 identical pages”

Model opinion: looks like abuse (target: Apple), confidence 82%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-28&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.