Flagged newborn domains, Saturday, August 29, 2026

185 names at tier low or above in .click, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highhicloud.clickscore 58echoes icloud· active website
brand in the nameicloudTLD with a high abuse rateclickbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNAMECHEAP+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highcloud-layerpoint.clickscore 56echoes icloud· active website
one-letter brand typocloud≈icloudTLD with a high abuse rateclickbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot, LLC+1 more

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highcloud-workcore.clickscore 56echoes icloud· active website
one-letter brand typocloud≈icloudTLD with a high abuse rateclickbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot, LLC+1 more

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highfreebonusaaah.clickscore 55echoes usaa· boilerplate page
brand in the nameusaalure words (login, verify, secure…)bonusTLD with a high abuse rateclickbrand name at a retail registrarName.com, Inc.+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highlcloud-com-ar.clickscore 55echoes icloud· no DNS
one-letter brand typolcloud≈icloudTLD with a high abuse rateclickbrand name on a rarely-seen nameserversoportedns.topbrand name at a retail registrarNameSilo, LLC+1 more
Highlcloud-com-cl.clickscore 55echoes icloud· boilerplate page
one-letter brand typolcloud≈icloudTLD with a high abuse rateclickbrand name on a rarely-seen nameserversoportedns.topbrand name at a retail registrarNameSilo, LLC+2 more

Model opinion: looks like abuse (target: Apple (iCloud)), confidence 78%. An opinion, not a finding.

Highlcloud-com-pe.clickscore 55echoes icloud· boilerplate page
one-letter brand typolcloud≈icloudTLD with a high abuse rateclickbrand name on a rarely-seen nameserversoportedns.topbrand name at a retail registrarNameSilo, LLC+2 more

Model opinion: looks like abuse (target: Apple (iCloud)), confidence 78%. An opinion, not a finding.

Highlcloud-findmylphone-devices.clickscore 55echoes icloud· redirects elsewhere
one-letter brand typolcloud≈icloudTLD with a high abuse rateclickbrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC+1 more

Model opinion: looks like abuse (target: Apple), confidence 79%. An opinion, not a finding.

Highverify-booking.clickscore 55echoes booking· blocked the probe
brand in the namebookinglure words (login, verify, secure…)verifyTLD with a high abuse rateclickbrand name behind Cloudflarecloudflare.com+3 more
Highverixon-bonusflare.clickscore 55echoes verizon· empty page
one-letter brand typoverixon≈verizonlure words (login, verify, secure…)bonusTLD with a high abuse rateclickbrand name behind Cloudflarecloudflare.com+2 more

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highverixon-cashstar.clickscore 55echoes verizon· empty page
one-letter brand typoverixon≈verizonTLD with a high abuse rateclickbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot, LLC+1 more

Model opinion: looks like abuse (target: Verizon), confidence 70%. An opinion, not a finding.

Highverixon-cashwave.clickscore 55echoes verizon· empty page
one-letter brand typoverixon≈verizonTLD with a high abuse rateclickbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot, LLC+1 more

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highverixon-goldenball.clickscore 55echoes verizon· empty page
one-letter brand typoverixon≈verizonTLD with a high abuse rateclickbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot, LLC+1 more

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highverixon-goldenorbit.clickscore 55echoes verizon· empty page
one-letter brand typoverixon≈verizonTLD with a high abuse rateclickbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot, LLC+1 more

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highverixon-jackpotblast.clickscore 55echoes verizon· empty page
one-letter brand typoverixon≈verizonTLD with a high abuse rateclickbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot, LLC+1 more

Model opinion: suspicious, confidence 62%. An opinion, not a finding.

Highverixon-luckyreward.clickscore 55echoes verizon· empty page
one-letter brand typoverixon≈verizonlure words (login, verify, secure…)rewardTLD with a high abuse rateclickbrand name behind Cloudflarecloudflare.com+2 more

Model opinion: looks like abuse (target: Verizon), confidence 60%. An opinion, not a finding.

Highverixon-luckystreak.clickscore 55echoes verizon· empty page
one-letter brand typoverixon≈verizonTLD with a high abuse rateclickbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot, LLC+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highcloud-beaconbase.clickscore 50echoes icloud· active website
one-letter brand typocloud≈icloudTLD with a high abuse rateclickbrand name at a retail registrarDynadot, LLCbrand name at a watch-list registrarDynadot, LLC

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highcloud-beaconhub.clickscore 50echoes icloud· active website
one-letter brand typocloud≈icloudTLD with a high abuse rateclickbrand name at a retail registrarDynadot, LLCbrand name at a watch-list registrarDynadot, LLC

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highcloud-cascadebase.clickscore 50echoes icloud· not probed yet
one-letter brand typocloud≈icloudTLD with a high abuse rateclickbrand name at a retail registrarDynadot, LLCbrand name at a watch-list registrarDynadot, LLC
Highcloud-crestbase.clickscore 50echoes icloud· not probed yet
one-letter brand typocloud≈icloudTLD with a high abuse rateclickbrand name at a retail registrarDynadot, LLCbrand name at a watch-list registrarDynadot, LLC
Highcloud-gridbase.clickscore 50echoes icloud· not probed yet
one-letter brand typocloud≈icloudTLD with a high abuse rateclickbrand name at a retail registrarDynadot, LLCbrand name at a watch-list registrarDynadot, LLC
Highcloud-matrixhub.clickscore 50echoes icloud· not probed yet
one-letter brand typocloud≈icloudTLD with a high abuse rateclickbrand name at a retail registrarDynadot, LLCbrand name at a watch-list registrarDynadot, LLC
Highcloud-panelbase.clickscore 50echoes icloud· not probed yet
one-letter brand typocloud≈icloudTLD with a high abuse rateclickbrand name at a retail registrarDynadot, LLCbrand name at a watch-list registrarDynadot, LLC
Highcloud-pivotbase.clickscore 50echoes icloud· not probed yet
one-letter brand typocloud≈icloudTLD with a high abuse rateclickbrand name at a retail registrarDynadot, LLCbrand name at a watch-list registrarDynadot, LLC
Highcloud-vertexhub.clickscore 50echoes icloud· active website
one-letter brand typocloud≈icloudTLD with a high abuse rateclickbrand name at a retail registrarDynadot, LLCbrand name at a watch-list registrarDynadot, LLC

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highfacehook.clickscore 50echoes facebook· active website
one-letter brand typofacehook≈facebookTLD with a high abuse rateclickbrand name on a rarely-seen nameserverbmdns.netbrand name at a retail registrarName.com, Inc.

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highbogles.clickscore 46· redirects elsewhere
TLD with a high abuse rateclickbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highfutsal.clickscore 46· active website
TLD with a high abuse rateclickbrand in page title, not in the namewordpressform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highjyha6j.clickscore 46· redirects elsewhere
TLD with a high abuse rateclickbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Mediumcard-twallet.clickscore 36· active website
lure words (login, verify, secure…)walletTLD with a high abuse rateclickpage impersonates a brandNetflix
Mediumprotocol28.clickscore 36· active website
TLD with a high abuse rateclickpage impersonates a brandCOINBASEform submits over plain HTTPhttps://x.protocol28.click
Mediumtest-new-ingress-001.clickscore 34· blocked the probe
many hyphens3TLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumfroz.clickscore 30· active website
TLD with a high abuse rateclickpage impersonates a brandMetaMask
Mediumtunerevm.clickscore 30· active website
TLD with a high abuse rateclickpage impersonates a brandMetaMask
Mediumaplrdnbrdanrvdla.clickscore 28· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumayogames-legend.clickscore 28· active website
TLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumbigo234nt.clickscore 28· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumboralinespzoo.clickscore 28· active website
TLD with a high abuse rateclickbrand in page title, not in the namegoogle
Mediumbuildingsinvestmentsspzoo.clickscore 28· active website
TLD with a high abuse rateclickbrand in page title, not in the namegoogle
Mediumcontatar.clickscore 28· active website
TLD with a high abuse rateclickbrand in page title, not in the namewhatsapp
Mediumcsnbregz.clickscore 28· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumdsornamental.clickscore 28· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumfairsplit.clickscore 28· server error
TLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumfudgetech.clickscore 28· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumhikaribet20.clickscore 28· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediuminfolumo.clickscore 28· active website
TLD with a high abuse rateclickbrand in page title, not in the namegoogle
Mediuminfonori.clickscore 28· active website
TLD with a high abuse rateclickbrand in page title, not in the namegoogle
Mediuminforeto.clickscore 28· active website
TLD with a high abuse rateclickbrand in page title, not in the namegoogle
Mediumironcityconstruction.clickscore 28· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflare

Same data as JSON: /api/zone/risk?day=2026-08-29&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.