Flagged newborn domains, Friday, August 28, 2026

23 names at tier low or above in .help, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highnetflix-renovacion-suscripcion.helpscore 55echoes netflix· empty page
brand in the namenetflixvery long name30free DNS providerdnsowl.combrand name at a retail registrarNameSilo, LLC+1 more

Model opinion: looks like phishing (target: Netflix), confidence 88%. An opinion, not a finding.

Highsignin-monzo.helpscore 55echoes monzo· robots.txt denied
brand in the namemonzolure words (login, verify, secure…)signinfree DNS providerdnsowl.combrand name at a retail registrarNameSilo, LLC+1 more
Highdisneyplusworldwild.helpscore 52echoes disney· placeholder page
brand in the namedisneyfree DNS providerdnsowl.combrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC

Model opinion: looks like abuse (target: Disney+), confidence 72%. An opinion, not a finding.

Highfacebookads.helpscore 52echoes facebook· active website
brand in the namefacebookfree DNS providerdnsowl.combrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC

Model opinion: suspicious, confidence 58%. An opinion, not a finding.

Highxcloud.helpscore 48echoes icloud· placeholder page
one-letter brand typoxcloud≈icloudbrand name on a rarely-seen nameservermagnetocell-server.combrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC

Model opinion: suspicious (target: Apple), confidence 68%. An opinion, not a finding.

Highsocietegeneralefr.helpscore 44echoes societegenerale· no DNS
brand in the namesocietegeneralebrand name behind Cloudflarecloudflare.combrand name at a retail registrarGlobal Domain Group LLC
Mediumfrecoin.helpscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumhowtofish.helpscore 38· active website
brand in page title, not in the namesteamform on a brand-styled pagehas_form
Mediumposhmark-order23958.helpscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediummyna-go-jp-accounts.helpscore 26· no web server
lure words (login, verify, secure…)account,accountsmany hyphens3free DNS providerdnsowl.com
Low98p.helpscore 22· active website
page impersonates a brandPayPal
Lowavhenting2708.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowfireweldmetalfabrication.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowhelsna.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowmyna-go-jp-account.helpscore 20· no web server
lure words (login, verify, secure…)accountmany hyphens3free DNS providerdnsowl.com
Lowprimehoa.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowverifdevice.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowrbcaccess1-cancellationportal.helpscore 16· robots.txt denied
lure words (login, verify, secure…)access,portalvery long name29
Lowasiahoki77.helpscore 14· active website
login formhas_form+login words
Lowfufuslot.helpscore 14· active website
login formhas_form+login words
Lowsatoshiwallet.helpscore 14· no DNS
lure words (login, verify, secure…)walletfree DNS providerdnsowl.com
Lowsupportes.helpscore 14· no DNS
lure words (login, verify, secure…)supportfree DNS providerdnsowl.com
Lowfriendofrecovery.helpscore 12· not probed yet
lure words (login, verify, secure…)recover,recovery

Same data as JSON: /api/zone/risk?day=2026-08-28&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.