Flagged newborn domains, Saturday, August 29, 2026

8,722 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highmercado-libre-app.sitescore 50echoes mercadolibre· robots.txt denied
brand in the namemercadolibrebrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC
Highmetamask.casinoscore 50echoes metamask· blocked the probe
brand in the namemetamaskbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDevexpanse Ltd d/b/a Regery.combrand name at a watch-list registrarDevexpanse Ltd d/b/a Regery.com+1 more
Highmetropcsbytmobile.netscore 50echoes tmobile
brand in the nametmobilebrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.
Highnelflix.streamscore 50echoes netflix· no DNS
one-letter brand typonelflix≈netflixTLD with a high abuse ratestreambrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.
Highoutloook.xyzscore 50echoes outlook· not probed yet
one-letter brand typooutloook≈outlookTLD with a high abuse ratexyzbrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highpending-coinbase.comscore 50echoes coinbase
brand in the namecoinbasebrand name behind Cloudflarecloudflare.combrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITEDbrand name at a watch-list registrarNICENIC INTERNATIONAL GROUP CO., LIMITED
Highpeptidegoogleads.infoscore 50echoes google· registrar placeholder
brand in the namegooglebrand name at a retail registrarIONOS SEform on a brand-styled pagehas_formidentical page on many newborns1140 identical pages

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highponsguy.xyzscore 50· active website
TLD with a high abuse ratexyzpage impersonates a brandMETAMASKbrand in page title, not in the namerobinhood

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highprofessoracamilaaraujo22gmail.comscore 50echoes gmail
brand in the namegmailvery long name29brand plus digitsprofessoracamilaaraujo22gmailbrand name at a retail registrarTucows Domains Inc.
Highpz3-telegrem.telscore 50echoes telegram· active website
one-letter brand typotelegrem≈telegrambrand plus digitspz3-telegrembrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.

Model opinion: looks like abuse (target: Telegram), confidence 78%. An opinion, not a finding.

Highrabobankcasino.comscore 50echoes rabobank
brand in the namerabobankbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDEVEXPANSE LTD d/b/a Regery.combrand name at a watch-list registrarDEVEXPANSE LTD d/b/a Regery.com
Highroflex.lolscore 50· active website
TLD with a high abuse ratelolpage impersonates a brandPayPalbrand in page title, not in the nameroblox

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highscreen-trezor.comscore 50echoes trezor
brand in the nametrezorbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITEDbrand name at a watch-list registrarNICENIC INTERNATIONAL GROUP CO., LIMITED
Highseverelystargazelle.shopscore 50echoes zelle· robots.txt denied
brand in the namezellebrand name behind Cloudflarecloudflare.combrand name at a retail registrarNamecheap, Inc.brand name at a watch-list registrarNamecheap, Inc.
Highskillhood.topscore 50· active website
TLD with a high abuse ratetoppage impersonates a brandMetaMaskbrand in page title, not in the namerobinhood

Model opinion: suspicious (target: Robinhood), confidence 72%. An opinion, not a finding.

Highstarlinkbr.shopscore 50echoes starlink· placeholder page
brand in the namestarlinkbrand name behind Cloudflarecloudflare.combrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highstarting-7.comscore 50echoes starling
one-letter brand typostarting≈starlingbrand plus digitsstarting-7brand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.
Highstillwaiting.funscore 50· active website
TLD with a high abuse ratefunpage impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highthundercoin.funscore 50· active website
TLD with a high abuse ratefunpage impersonates a brandMetaMaskbrand in page title, not in the namerobinhood

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Hightiktok-in.comscore 50echoes tiktok
brand in the nametiktokbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGname.com Pte. Ltd.brand name at a watch-list registrarGname.com Pte. Ltd.
Hightiktok-ind.comscore 50echoes tiktok
brand in the nametiktokbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGname.com Pte. Ltd.brand name at a watch-list registrarGname.com Pte. Ltd.
Hightiktokminigame.shopscore 50echoes tiktok· no DNS
brand in the nametiktokbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGNAME.COM PTE. LTD.brand name at a watch-list registrarGNAME.COM PTE. LTD.
Hightiktokrooms.artscore 50echoes tiktok· robots.txt denied
brand in the nametiktokbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC
Hightiktokshipind.comscore 50echoes tiktok
brand in the nametiktokbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGname.com Pte. Ltd.brand name at a watch-list registrarGname.com Pte. Ltd.
Hightoxbox.sitescore 50echoes xbox· no DNS
brand in the namexboxbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Hightrust-wallet.tradescore 50echoes trustwallet· empty page
brand in the nametrustwalletlure words (login, verify, secure…)walletbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGlobal Domain Group LLC

Model opinion: looks like abuse (target: Trust Wallet), confidence 78%. An opinion, not a finding.

Highuniswapuniszk.comscore 50echoes uniswap
brand in the nameuniswapbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highuniswapunixkp.comscore 50echoes uniswap
brand in the nameuniswapbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highutrezor.comscore 50echoes trezor· no DNS
brand in the nametrezorbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITEDbrand name at a watch-list registrarNICENIC INTERNATIONAL GROUP CO., LIMITED
Highvanguard-group-inc.comscore 50echoes vanguard
brand in the namevanguardbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGname.com Pte. Ltd.brand name at a watch-list registrarGname.com Pte. Ltd.
Highvetadobe.comscore 50echoes adobe
brand in the nameadobebrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC
Highvspr.funscore 50· active website
TLD with a high abuse ratefunpage impersonates a brandMetaMaskbrand in page title, not in the namerobinhood

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highzelle-ai-invst.comscore 50echoes zelle
brand in the namezellebrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highzelle-plat.comscore 50echoes zelle
brand in the namezellebrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highaposte.spacescore 48echoes laposte· empty page
one-letter brand typoaposte≈lapostebrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.

Model opinion: suspicious, confidence 45%. An opinion, not a finding.

Highaposte.storescore 48echoes laposte· empty page
one-letter brand typoaposte≈lapostebrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highauxbox.proscore 48echoes xbox· boilerplate page
brand in the namexboxbrand name at a retail registrarTucows Domains Inc.identical page on many newborns1468 identical pages

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highbillinglinkedinnagivator.comscore 48echoes linkedin
brand in the namelinkedinlure words (login, verify, secure…)billingbrand name at a retail registrarSquarespace Domains II LLC
Highbradesco.emailscore 48echoes bradesco· parked, for sale
brand in the namebradescobrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc+2 more

Model opinion: looks like abuse (target: Bradesco), confidence 76%. An opinion, not a finding.

Highbrasil-mobile.comscore 48echoes tmobile
one-letter brand typomobile≈tmobilebrand name behind Cloudflarecloudflare.combrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highcalcolatricechatgpt.shopscore 48echoes chatgpt· boilerplate page
brand in the namechatgptbrand name at a retail registrarEnom, Incidentical page on many newborns104 identical pages

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highcdn-shopfy.comscore 48echoes shopify
one-letter brand typoshopfy≈shopifybrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highcromulentmobile.sitescore 48echoes tmobile· boilerplate page
brand in the nametmobilebrand name at a retail registrarSynergy Wholesale Accreditations Pty Ltdidentical page on many newborns184 identical pages

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highfinance-arq.onlinescore 48echoes binance· blocked the probe
one-letter brand typofinance≈binancebrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highfrshopeely.shopscore 48echoes shopee· blocked the probe
brand in the nameshopeebrand name behind Cloudflarecloudflare.combrand name at a retail registrarTuringsign Inc.brand in page title, not in the namecloudflare
Highgoogleadwordscertificationanswers.comscore 48echoes google
brand in the namegooglevery long name33brand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highitshopeely.shopscore 48echoes shopee· blocked the probe
brand in the nameshopeebrand name behind Cloudflarecloudflare.combrand name at a retail registrarTuringsign Inc.brand in page title, not in the namecloudflare
Highlcloud-com-ar.helpscore 48echoes icloud· no DNS
one-letter brand typolcloud≈icloudbrand name on a rarely-seen nameserversoportedns.topbrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC
Highlcloud-satlite.infoscore 48echoes icloud· no DNS
one-letter brand typolcloud≈icloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarSav.com, LLCbrand name at a watch-list registrarSav.com, LLC
Highloginmicrosoftsso.comscore 48echoes microsoft
brand in the namemicrosoftlure words (login, verify, secure…)loginbrand name at a retail registrarGoDaddy.com, LLC

Same data as JSON: /api/zone/risk?day=2026-08-29&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.