Flagged newborn domains, Monday, August 31, 2026

2,110 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highvelma-ex.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 70%. An opinion, not a finding.

Highvelto-ex.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highvimk.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the nameamazonform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highvinted.hairscore 46· redirects elsewhere
TLD with a high abuse ratehairbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highvkfp.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the nameamazonform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highvuid.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the nameamazonform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highwewovejaciho.lolscore 46· redirects elsewhere
TLD with a high abuse ratelolbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highwinzz777.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 62%. An opinion, not a finding.

Highwwwreflixtour.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the nameshopifyform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highxentra-ex.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 65%. An opinion, not a finding.

Highyxchat.winscore 46· active website
TLD with a high abuse ratewinbrand in page title, not in the namewordpressform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 78%. An opinion, not a finding.

Highzias.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the nameamazonform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highzisj.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the nameamazonform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Highzoxk.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the nameamazonform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highzsja.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the nameamazonform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 55%. An opinion, not a finding.

High3ntuit.comscore 44echoes intuit
one-letter brand typo3ntuit≈intuitbrand plus digits3ntuitbrand name at a retail registrarGoDaddy.com, LLC
Higha2ipay.comscore 44echoes alipay
one-letter brand typoa2ipay≈alipaybrand plus digitsa2ipaybrand name at a retail registrarGoDaddy.com, LLC
Highaaglobalcu.orgscore 44· active website
page asks for credentialsLog in to your accountlogin formhas_form+login words

Model opinion: looks like phishing (target: Global Credit Union (Global Federal Credit Union)), confidence 85%. An opinion, not a finding.

Highabecsl.orgscore 44· active website
page asks for credentialsSign in to your accountlogin formhas_form+login words

Model opinion: looks benign, confidence 78%. An opinion, not a finding.

Highakbautransportgmail.comscore 44echoes gmail
brand in the namegmailbrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC
Highalaicloud.shopscore 44echoes icloud· no DNS
brand in the nameicloudbrand name at a retail registrarDynadot Inc.brand name at a watch-list registrarDynadot Inc.
Highamazonflexinfo.comscore 44echoes amazon
brand in the nameamazonbrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.
Highamazonviewpoint.comscore 44echoes amazon
brand in the nameamazonbrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.
Highamericanexpress-ja-jp.comscore 44echoes americanexpress
brand in the nameamericanexpressbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGoDaddy.com, LLC
Highbarbie-tik-tok.babyscore 44echoes tiktok· active website
brand in the nametiktokbrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLC

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highbestbuymails.comscore 44echoes bestbuy
brand in the namebestbuybrand name behind Cloudflarecloudflare.combrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highbestbuyonline.storescore 44echoes bestbuy· boilerplate page
brand in the namebestbuybrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.

Model opinion: looks like abuse, confidence 82%. An opinion, not a finding.

Highbufffollowtiktok.comscore 44echoes tiktok
brand in the nametiktokbrand name behind Cloudflarecloudflare.combrand name at a retail registrariNET SOFTWARE COMPANY LIMITED
Highbugfacebook.comscore 44echoes facebook
brand in the namefacebookbrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.
Highc0venantindustries-finance.comscore 44echoes binance
one-letter brand typofinance≈binancebrand plus digitsc0venantindustries-financebrand name at a retail registrarGoDaddy.com, LLC
Highcadabrarobinhood.comscore 44echoes robinhood
brand in the namerobinhoodbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highchroniclevanguard.comscore 44echoes vanguard
brand in the namevanguardbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highcloudaicloud.comscore 44echoes icloud· no DNS
brand in the nameicloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.
Highcn-telegram.orgscore 44echoes telegram· server error
brand in the nametelegrambrand name behind Cloudflarecloudflare.combrand name at a retail registrarFewmoretaps OU d/b/a Trustname.com

Model opinion: suspicious (target: Telegram), confidence 72%. An opinion, not a finding.

Highcorevanguard.appscore 44echoes vanguard· active website
brand in the namevanguardbrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudFlare, Inc.

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highcovenant1ndustries-finance.comscore 44echoes binance· no web server
one-letter brand typofinance≈binancebrand plus digitscovenant1ndustries-financebrand name at a retail registrarGoDaddy.com, LLC
Highdauthenticator.comscore 44echoes authenticator
brand in the nameauthenticatorbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highdesjardinsaccesmobile.comscore 44echoes desjardins
brand in the namedesjardinsbrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITEDbrand name at a watch-list registrarNICENIC INTERNATIONAL GROUP CO., LIMITED
Highdigitalsave.onlinescore 44· active website
page asks for credentialsSign in to your accountlogin formhas_form+login words

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highdoradobe.comscore 44echoes adobe
brand in the nameadobebrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highdreamhireaicloud.infoscore 44echoes icloud· not probed yet
brand in the nameicloudbrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLC
Highekomuhendislik.livescore 44· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_formform submits over plain HTTPhttps://ekomuhendislik.live/

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highesteghlaaltwitter.sitescore 44echoes twitter· placeholder page
brand in the nametwitterbrand name on a rarely-seen nameserverviphost-dns.combrand name at a retail registrarCSL Computer Service Langenbach GmbH d/b

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highfoxbox.deliveryscore 44echoes xbox· no DNS
brand in the namexboxbrand name at a retail registrarDevexpanse Ltd d/b/a Regery.combrand name at a watch-list registrarDevexpanse Ltd d/b/a Regery.com
Highgoogle-darkweb.comscore 44echoes google
brand in the namegooglebrand name behind Cloudflarecloudflare.combrand name at a retail registrarGoDaddy.com, LLC
Highgoogleamznrbest.comscore 44echoes google· no web server
brand in the namegooglebrand name at a retail registrarAlibaba Cloud Computing Ltd. d/b/a HiChibrand name at a watch-list registrarAlibaba Cloud Computing Ltd. d/b/a HiChi
Highgooglereviewrobot.comscore 44echoes google
brand in the namegooglebrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.
Highgotpaid.onlinescore 44· active website
page asks for credentialsyour account will be suspendedlogin formhas_form+login words

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highgranitebay.helpscore 44echoes ebay· not probed yet
brand in the nameebaybrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLC
Highiatiktok.comscore 44echoes tiktok
brand in the nametiktokbrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLC

Same data as JSON: /api/zone/risk?day=2026-08-31&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.