Flagged newborn domains, Saturday, August 29, 2026

20 names at tier high or above in .online, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highaustria-vanguard.onlinescore 55echoes vanguard· server error
brand in the namevanguardbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGoDaddy.com, LLCbrand name and brand-styled pagevanguard

Model opinion: suspicious (target: Vanguard), confidence 60%. An opinion, not a finding.

Highzellecloudmail.onlinescore 55echoes zelle· registrar placeholder
brand in the namezellebrand name at a retail registrarIONOS SEform on a brand-styled pagehas_formidentical page on many newborns1140 identical pages

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highcashappweb.onlinescore 54echoes cashapp· registrar placeholder
brand in the namecashappbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.identical page on many newborns4484 identical pages

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highchathpt.onlinescore 54echoes chatgpt· active website
one-letter brand typochathpt≈chatgptbrand name at a retail registrarKey-Systems LLCform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highloginbinance-tr.onlinescore 54echoes binance· empty page
brand in the namebinancelure words (login, verify, secure…)loginbrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc

Model opinion: suspicious (target: Binance), confidence 72%. An opinion, not a finding.

Highdocusign-apps.onlinescore 52echoes docusign· robots.txt denied
brand in the namedocusignfree DNS providerdnsowl.combrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC
Highfinance-arq.onlinescore 48echoes binance· blocked the probe
one-letter brand typofinance≈binancebrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highxn--naorubronegra-xeb3d.onlinescore 48· registrar placeholder
punycode namenaçãorubronegra scripts=LATINbrand in page title, not in the namehostingeridentical page on many newborns80 identical pages

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highsam-finance.onlinescore 46echoes binance· boilerplate page
one-letter brand typofinance≈binancebrand name at a retail registrarTucows Domains Inc.identical page on many newborns75 identical pages

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highamazonin.onlinescore 44echoes amazon· empty page
brand in the nameamazonbrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.

Model opinion: looks like abuse (target: Amazon), confidence 75%. An opinion, not a finding.

Highcentralvanguard.onlinescore 44echoes vanguard· empty page
brand in the namevanguardbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highlogbsbclservice.onlinescore 44· active website
lure words (login, verify, secure…)servicebrand in page title, not in the namehsbcform on a brand-styled pagehas_form

Model opinion: looks like phishing (target: HSBC), confidence 97%. An opinion, not a finding.

Highopenwhatsapp.onlinescore 44echoes whatsapp· no web server
brand in the namewhatsappbrand name at a retail registrarWeb Commerce Communications Limited dba brand name at a watch-list registrarWeb Commerce Communications Limited dba
Highauraamail.onlinescore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highnebula-stride.onlinescore 42echoes stripe· active website
one-letter brand typostride≈stripebrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.
Highplot-twister.onlinescore 42echoes twitter· active website
one-letter brand typotwister≈twitterbrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.
Highservicespro.onlinescore 42· registrar placeholder
lure words (login, verify, secure…)service,servicesbrand in page title, not in the namehostingeridentical page on many newborns80 identical pages
Highthe-sterling.onlinescore 42echoes starling· active website
one-letter brand typosterling≈starlingbrand name behind Cloudflarecloudflare.combrand name at a retail registrarChengdu West Dimension Digital Technolog
Hightvone.onlinescore 42· active website
page impersonates a brandPayPalbrand in page title, not in the namepaypal
Highitmobiletech.onlinescore 40echoes tmobile· active website
brand in the nametmobilebrand name at a retail registrarDiamatrix C.C.form on a brand-styled pagehas_form

Same data as JSON: /api/zone/risk?day=2026-08-29&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.