Flagged newborn domains, Sunday, August 30, 2026

15 names at tier high or above in .org, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalslackdaddy.orgscore 68echoes slack· active website
brand in the nameslackbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.+1 more

Model opinion: looks like abuse, confidence 88%. An opinion, not a finding.

Criticalxn--iptvleverantrer-ktb.orgscore 60· active website
punycode nameiptvleverantörer scripts=LATINpage impersonates a brandNetflixbrand in page title, not in the namewhatsapp

Model opinion: looks like abuse, confidence 92%. An opinion, not a finding.

Hightelegramgrup.orgscore 59echoes telegram· active website
brand in the nametelegrambrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.brand name and brand-styled pagetelegram

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Higheyesopenai.orgscore 55echoes openai· blocked the probe
brand in the nameopenaibrand name at a retail registrarGoDaddy.com, LLCform on a brand-styled pagehas_form
Highphelta-cloud.orgscore 55echoes icloud· registrar placeholder
one-letter brand typocloud≈icloudbrand name at a retail registrarIONOS SEform on a brand-styled pagehas_formidentical page on many newborns1073 identical pages

Model opinion: looks benign, confidence 94%. An opinion, not a finding.

Highxn--revolutionreinterventionen-saar-zvc.orgscore 55echoes revolut· registrar placeholder
punycode namerevolutionäreinterventionen-saar scriptsbrand in the namerevolutvery long name32brand name at a retail registrarIONOS SE+2 more

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highsd-finance.orgscore 54echoes binance· active website
one-letter brand typofinance≈binancebrand name at a retail registrarName.com, Inc.form on a brand-styled pagehas_form

Model opinion: looks benign, confidence 83%. An opinion, not a finding.

Highspotifyapk.orgscore 54echoes spotify· boilerplate page
brand in the namespotifybrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLCidentical page on many newborns1190 identical pages

Model opinion: looks like abuse (target: Spotify), confidence 72%. An opinion, not a finding.

Highspotifypro.orgscore 54echoes spotify· boilerplate page
brand in the namespotifybrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLCidentical page on many newborns1190 identical pages

Model opinion: looks like abuse (target: Spotify), confidence 68%. An opinion, not a finding.

Highstarlinktravel.orgscore 54echoes starlink· registrar placeholder
brand in the namestarlinkbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.identical page on many newborns3394 identical pages

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Hightelegramifsagruplari.orgscore 54echoes telegram· boilerplate page
brand in the nametelegrambrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLCidentical page on many newborns1190 identical pages

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highinnovationos.orgscore 44echoes ionos· robots.txt denied
brand in the nameionosbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highionosci.orgscore 44echoes ionos· active website
brand in the nameionosbrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highplannetflix.orgscore 44echoes netflix· not probed yet
brand in the namenetflixbrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highstarlinkinternationalacademy.orgscore 42echoes starlink· no web server
brand in the namestarlinkvery long name28brand name at a retail registrarPDR Ltd. d/b/a PublicDomainRegistry.com

Same data as JSON: /api/zone/risk?day=2026-08-30&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.