Flagged newborn domains, Monday, August 31, 2026

564 names at tier high or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highvelma-ex.icuscore 46· active website
TLD with a high abuse rate “icu”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 70%. An opinion, not a finding.

Highvelto-ex.icuscore 46· active website
TLD with a high abuse rate “icu”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highvimk.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “amazon”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highvinted.hairscore 46· redirects elsewhere
TLD with a high abuse rate “hair”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highvkfp.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “amazon”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highvuid.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “amazon”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highwewovejaciho.lolscore 46· redirects elsewhere
TLD with a high abuse rate “lol”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highwinzz777.cfdscore 46· redirects elsewhere
TLD with a high abuse rate “cfd”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 62%. An opinion, not a finding.

Highwwwreflixtour.cfdscore 46· redirects elsewhere
TLD with a high abuse rate “cfd”brand in page title, not in the name “shopify”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highxentra-ex.icuscore 46· active website
TLD with a high abuse rate “icu”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 65%. An opinion, not a finding.

Highyxchat.winscore 46· active website
TLD with a high abuse rate “win”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 78%. An opinion, not a finding.

Highzias.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “amazon”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highzisj.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “amazon”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Highzoxk.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “amazon”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highzsja.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “amazon”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 55%. An opinion, not a finding.

High3ntuit.comscore 44echoes intuit
one-letter brand typo “3ntuit≈intuit”brand plus digits “3ntuit”brand name at a retail registrar “GoDaddy.com, LLC”
Higha2ipay.comscore 44echoes alipay
one-letter brand typo “a2ipay≈alipay”brand plus digits “a2ipay”brand name at a retail registrar “GoDaddy.com, LLC”
Highaaglobalcu.orgscore 44· active website
page asks for credentials “Log in to your account”login form “has_form+login words”

Model opinion: looks like phishing (target: Global Credit Union (Global Federal Credit Union)), confidence 85%. An opinion, not a finding.

Highabecsl.orgscore 44· active website
page asks for credentials “Sign in to your account”login form “has_form+login words”

Model opinion: looks benign, confidence 78%. An opinion, not a finding.

Highakbautransportgmail.comscore 44echoes gmail
brand in the name “gmail”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highalaicloud.shopscore 44echoes icloud· no DNS
brand in the name “icloud”brand name at a retail registrar “Dynadot Inc.”brand name at a watch-list registrar “Dynadot Inc.”
Highamazonflexinfo.comscore 44echoes amazon
brand in the name “amazon”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highamazonviewpoint.comscore 44echoes amazon
brand in the name “amazon”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highamericanexpress-ja-jp.comscore 44echoes americanexpress
brand in the name “americanexpress”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
Highbarbie-tik-tok.babyscore 44echoes tiktok· active website
brand in the name “tiktok”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highbestbuymails.comscore 44echoes bestbuy
brand in the name “bestbuy”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highbestbuyonline.storescore 44echoes bestbuy· boilerplate page
brand in the name “bestbuy”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks like abuse, confidence 82%. An opinion, not a finding.

Highbufffollowtiktok.comscore 44echoes tiktok
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “iNET SOFTWARE COMPANY LIMITED”
Highbugfacebook.comscore 44echoes facebook
brand in the name “facebook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highc0venantindustries-finance.comscore 44echoes binance
one-letter brand typo “finance≈binance”brand plus digits “c0venantindustries-finance”brand name at a retail registrar “GoDaddy.com, LLC”
Highcadabrarobinhood.comscore 44echoes robinhood
brand in the name “robinhood”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highchroniclevanguard.comscore 44echoes vanguard
brand in the name “vanguard”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highcloudaicloud.comscore 44echoes icloud· no DNS
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highcn-telegram.orgscore 44echoes telegram· server error
brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Fewmoretaps OU d/b/a Trustname.com”

Model opinion: suspicious (target: Telegram), confidence 72%. An opinion, not a finding.

Highcorevanguard.appscore 44echoes vanguard· active website
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “CloudFlare, Inc.”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highcovenant1ndustries-finance.comscore 44echoes binance· no web server
one-letter brand typo “finance≈binance”brand plus digits “covenant1ndustries-finance”brand name at a retail registrar “GoDaddy.com, LLC”
Highdauthenticator.comscore 44echoes authenticator
brand in the name “authenticator”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highdesjardinsaccesmobile.comscore 44echoes desjardins
brand in the name “desjardins”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highdigitalsave.onlinescore 44· active website
page asks for credentials “Sign in to your account”login form “has_form+login words”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highdoradobe.comscore 44echoes adobe
brand in the name “adobe”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highdreamhireaicloud.infoscore 44echoes icloud· not probed yet
brand in the name “icloud”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highekomuhendislik.livescore 44· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”form submits over plain HTTP “https://ekomuhendislik.live/”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highesteghlaaltwitter.sitescore 44echoes twitter· placeholder page
brand in the name “twitter”brand name on a rarely-seen nameserver “viphost-dns.com”brand name at a retail registrar “CSL Computer Service Langenbach GmbH d/b”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highfoxbox.deliveryscore 44echoes xbox· no DNS
brand in the name “xbox”brand name at a retail registrar “Devexpanse Ltd d/b/a Regery.com”brand name at a watch-list registrar “Devexpanse Ltd d/b/a Regery.com”
Highgoogle-darkweb.comscore 44echoes google
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
Highgoogleamznrbest.comscore 44echoes google· no web server
brand in the name “google”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Highgooglereviewrobot.comscore 44echoes google
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highgotpaid.onlinescore 44· active website
page asks for credentials “your account will be suspended”login form “has_form+login words”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highgranitebay.helpscore 44echoes ebay· not probed yet
brand in the name “ebay”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highiatiktok.comscore 44echoes tiktok
brand in the name “tiktok”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”

Same data as JSON: /api/zone/risk?day=2026-08-31&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.