Flagged newborn domains, Sunday, August 30, 2026

75 names at tier medium or above in .online, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalrobloxbalance.onlinescore 62echoes roblox· active website
brand in the namerobloxbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.form on a brand-styled pagehas_form

Model opinion: looks like phishing (target: Roblox), confidence 94%. An opinion, not a finding.

Critical4kpandora.onlinescore 60· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflixform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 92%. An opinion, not a finding.

Criticalbuygiftcards.onlinescore 60· active website
page impersonates a brandNetflixbrand in page title, not in the namestripeform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

brand in the namegooglelure words (login, verify, secure…)verificationvery long name58brand plus digitsgoogle-site-verificationbraesvyebikyznrd+1 more
Highrobinhoodpad.onlinescore 55echoes robinhood· empty page
brand in the namerobinhoodbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.brand name and brand-styled pagerobinhood

Model opinion: looks like a scam (target: Robinhood), confidence 82%. An opinion, not a finding.

Highfinance-v2.onlinescore 54echoes binance· boilerplate page
one-letter brand typofinance≈binancebrand plus digitsfinance-v2brand name at a retail registrarTucows Domains Inc.identical page on many newborns1663 identical pages

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highrobloxmail.onlinescore 54echoes roblox· registrar placeholder
brand in the namerobloxbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.identical page on many newborns3394 identical pages

Model opinion: looks like abuse (target: Roblox), confidence 68%. An opinion, not a finding.

Highalipay-hk.onlinescore 44echoes alipay· no DNS
brand in the namealipaybrand name behind Cloudflarecloudflare.combrand name at a retail registrarGlobal Domain Group LLC
Highbinanceai.onlinescore 44echoes binance· robots.txt denied
brand in the namebinancebrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highinnovationos.onlinescore 44echoes ionos· robots.txt denied
brand in the nameionosbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highplaystationbalance.onlinescore 44echoes playstation· empty page
brand in the nameplaystationbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.

Model opinion: looks like phishing (target: PlayStation (Sony Interactive Entertainment)), confidence 85%. An opinion, not a finding.

Highstalkerinstagram.onlinescore 44echoes instagram· not probed yet
brand in the nameinstagrambrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Hightiktokvote.onlinescore 44echoes tiktok· robots.txt denied
brand in the nametiktokbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highcasinoignition.onlinescore 42· active website
page impersonates a brandPayPalbrand in page title, not in the namepaypal

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highkhotaikhoanhuy.onlinescore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks like abuse, confidence 78%. An opinion, not a finding.

Highlineae.onlinescore 42echoes lineme· blocked the probe
one-letter brand typolineae≈linemebrand name at a retail registrarAlibaba Cloud Computing Ltd. d/b/a HiChibrand name at a watch-list registrarAlibaba Cloud Computing Ltd. d/b/a HiChi
Highstreamche.onlinescore 42· active website
page impersonates a brandNetflixbrand in page title, not in the nameamazon
Highultrastoredz.onlinescore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix
Highxn--80adjuesahjx.onlinescore 40· active website
punycode nameвелопрокат scripts=CYRILLICpage impersonates a brandPayPal
Mediumchatgpt-class.onlinescore 38echoes chatgpt· empty page
brand in the namechatgptbrand name at a retail registrarDNSPod, Inc.
Mediumcoursero.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumdigitalreceipt.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumfanloop.onlinescore 38· active website
brand in page title, not in the namestripeform on a brand-styled pagehas_form
Mediumfedextransitly.onlinescore 38echoes fedex· robots.txt denied
brand in the namefedexbrand name at a retail registrarNetwork Solutions, LLC
Mediumfruttabot.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumharoonhassan.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumimersaocripto.onlinescore 38· active website
brand in page title, not in the nametrezorform on a brand-styled pagehas_form
Mediumkmsorgulamahizmetcinizz.onlinescore 38· blocked the probe
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumlazadamarket.onlinescore 38echoes lazada· robots.txt denied
brand in the namelazadabrand name at a retail registrarRegistrar of Domain Names REG.RU LLC
Mediumlb0001.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumlb0002.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumlb001.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumlb002.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediummain0001.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediummain001.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediummfakuwait.onlinescore 38· active website
brand in page title, not in the nameoutlookform on a brand-styled pagehas_form
Mediummotowink.onlinescore 38· redirects elsewhere
brand in page title, not in the nametiktokform on a brand-styled pagehas_form
Mediumpersonalizeigostei.onlinescore 38· redirects elsewhere
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumquick-books-intuit.onlinescore 38echoes intuit· robots.txt denied
brand in the nameintuitbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Mediumradhakrishnagaushala.onlinescore 38· active website
brand in page title, not in the nameinstagramform on a brand-styled pagehas_form
Mediumrevtag.onlinescore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumrobinsnestmeghalaya.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumrobloxboxpod.onlinescore 38echoes roblox· no DNS
brand in the namerobloxbrand name at a retail registrarRegistrar of Domain Names REG.RU LLC
Mediumshopinterestcalculator.onlinescore 38· active website
brand in page title, not in the nameledgerform on a brand-styled pagehas_form
Mediumsocialmockup.onlinescore 38· active website
brand in page title, not in the nameinstagramform on a brand-styled pagehas_form
Mediumtokobecak.onlinescore 38· redirects elsewhere
brand in page title, not in the namelazadaform on a brand-styled pagehas_form
Mediumwcky.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumportalgov.onlinescore 36· registrar placeholder
lure words (login, verify, secure…)portalbrand in page title, not in the namehostingeridentical page on many newborns46 identical pages
Mediumweb-customerportal.onlinescore 32· blocked the probe
lure words (login, verify, secure…)customer,portalbrand in page title, not in the namecloudflare
Mediumalvemodba.onlinescore 30· active website
page asks for credentialsLogin to your account

Same data as JSON: /api/zone/risk?day=2026-08-30&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.