Flagged newborn domains, Friday, September 4, 2026

12,463 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highwhatsapp-w.netscore 44echoes whatsapp
brand in the namewhatsappbrand name at a retail registrarGname.com Pte. Ltd.brand name at a watch-list registrarGname.com Pte. Ltd.
Highwhatsapp-web-indonesia.comscore 44echoes whatsapp· empty page
brand in the namewhatsappbrand name at a retail registrarGname.com Pte. Ltd.brand name at a watch-list registrarGname.com Pte. Ltd.

Model opinion: suspicious (target: WhatsApp), confidence 72%. An opinion, not a finding.

Highwhatsapp-web-vietnam.comscore 44echoes whatsapp
brand in the namewhatsappbrand name at a retail registrarGname.com Pte. Ltd.brand name at a watch-list registrarGname.com Pte. Ltd.
Highwhatsapp-web.plusscore 44echoes whatsapp· no DNS
brand in the namewhatsappbrand name at a retail registrarGNAME.COM PTE. LTD.brand name at a watch-list registrarGNAME.COM PTE. LTD.
Highwhatsappbroker.comscore 44echoes whatsapp
brand in the namewhatsappbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameslink (Hong Kong) Private Limited
Highwordpressachplugin.comscore 44echoes wordpress
brand in the namewordpressbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGoDaddy.com, LLC
Highworkwechat.netscore 44echoes wechat
brand in the namewechatbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highwwvww-facebook.comscore 44echoes facebook
brand in the namefacebookbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highyyw-cloud.xyzscore 44echoes icloud· not probed yet
one-letter brand typocloud≈icloudTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highzellebot-ai.comscore 44echoes zelle
brand in the namezellebrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highzihan-cloud.xyzscore 44echoes icloud· not probed yet
one-letter brand typocloud≈icloudTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highzkwap-finance.xyzscore 44echoes binance· not probed yet
one-letter brand typofinance≈binanceTLD with a high abuse ratexyzbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Highadeyinkaadebayogeneralhospital.orgscore 42echoes ebay· registrar placeholder
brand in the nameebayvery long name30brand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.+1 more

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highainance.orgscore 42echoes binance· parked, for sale
one-letter brand typoainance≈binancebrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highallinone-cloud.onlinescore 42echoes icloud· active website
one-letter brand typocloud≈icloudbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highapp-lcloud.helpscore 42echoes icloud· empty page
one-letter brand typolcloud≈icloudbrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC

Model opinion: looks like phishing (target: Apple (iCloud)), confidence 72%. An opinion, not a finding.

Highartificialinu.storescore 42· active website
page impersonates a brandMetaMaskbrand in page title, not in the nameopensea

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highbest-whtsapp.comscore 42echoes whatsapp
one-letter brand typowhtsapp≈whatsappbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGuizhou Zhongyu Zhike Network Technology
Highbilatbaho.techscore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks like phishing (target: Netflix), confidence 62%. An opinion, not a finding.

Highbooklng-arrlve.comscore 42echoes booking
one-letter brand typobooklng≈bookingbrand name behind Cloudflarecloudflare.combrand name at a retail registrarOwnRegistrar, Inc.
Highboring-finance.comscore 42echoes binance
one-letter brand typofinance≈binancebrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.
Highbowking.appscore 42echoes booking· no DNS
one-letter brand typobowking≈bookingbrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudFlare, Inc.
Highcdn-shopiify.comscore 42echoes shopify
one-letter brand typoshopiify≈shopifybrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highcloud-ace.techscore 42echoes icloud· robots.txt denied
one-letter brand typocloud≈icloudbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highcloud-finops.onlinescore 42echoes icloud· no DNS
one-letter brand typocloud≈icloudbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highcloud-perkin.comscore 42echoes icloud
one-letter brand typocloud≈icloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.
Highcloud.futbolscore 42echoes icloud· not probed yet
one-letter brand typocloud≈icloudbrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.
Highcloudalipaytun.topscore 42echoes alipay· server error
brand in the namealipayTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo,LLC+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highcoinsclash.appscore 42· active website
page impersonates a brandMetaMaskbrand in page title, not in the namemetamask

Model opinion: suspicious (target: MetaMask), confidence 72%. An opinion, not a finding.

Highdentalos.spacescore 42· active website
page impersonates a brandNetflixbrand in page title, not in the nameshopify

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highdivn.onlinescore 42· active website
page impersonates a brandMetaMaskbrand in page title, not in the namerobinhood

Model opinion: looks like a scam, confidence 76%. An opinion, not a finding.

Highdmsglobal-cloud.comscore 42echoes icloud
one-letter brand typocloud≈icloudbrand name on a rarely-seen nameservercom.cobrand name at a retail registrarHello Internet Corp
Highfinance-eunt.livingscore 42echoes binance· blocked the probe
one-letter brand typofinance≈binancebrand name at a retail registrarNAMECHEAPbrand name at a watch-list registrarNAMECHEAP
Highgalaxytriangle.topscore 42· active website
TLD with a high abuse ratetoppage pushes urgent paymentrisk-freebrand in page title, not in the namerobinhood

Model opinion: looks like phishing (target: Robinhood), confidence 75%. An opinion, not a finding.

Highgiftkey.sitescore 42· active website
page impersonates a brandApple IDbrand in page title, not in the nameapple

Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.

Highglow-bookings.comscore 42echoes booking
one-letter brand typobookings≈bookingbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highgodz-casino-online.inkscore 42· active website
page impersonates a brandPayPalbrand in page title, not in the namepaypal

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highgruapp.devscore 42· active website
page impersonates a brandApple IDbrand in page title, not in the nameapple

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highgulf-ledgers.comscore 42echoes ledger
one-letter brand typoledgers≈ledgerbrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.
Highharz-cloud.comscore 42echoes icloud
one-letter brand typocloud≈icloudbrand name on a rarely-seen nameserverawsdns-00.orgbrand name at a retail registrarAmazon Registrar, Inc.
Highhttpadminshopifycomjmny.storescore 42echoes shopify· other
brand in the nameshopifybrand name at a retail registrarNamify Domains Incbrand in page title, not in the namecloudflare
Highhustle-energy.sitescore 42· active website
page impersonates a brandFedExbrand in page title, not in the namefedex
Highicicibankrewards.comscore 42· registrar placeholder
lure words (login, verify, secure…)reward,rewardsbrand in page title, not in the namehostingeridentical page on many newborns23 identical pages
Highindianapolis-concrete-company.comscore 42· active website
very long name29brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Highinsigniafiretv.orgscore 42· active website
page impersonates a brandNetflixbrand in page title, not in the nameamazon
Highisitascam.appscore 42· active website
page impersonates a brandPayPalbrand in page title, not in the nameinstagram
Highjosephmarler.onlinescore 42· active website
page impersonates a brandOffice 365brand in page title, not in the namemicrosoft
Highkiran-cloud.comscore 42echoes icloud
one-letter brand typocloud≈icloudbrand name on a rarely-seen nameserverawsdns-32.combrand name at a retail registrarGoDaddy.com, LLC
Highlcloud-shop.comscore 42echoes icloud
one-letter brand typolcloud≈icloudbrand name on a rarely-seen nameserversupvipdn.probrand name at a retail registrarInternet Domain Service BS Corp
Highledgerclean.appscore 42· active website
page impersonates a brandChase Bankbrand in page title, not in the namequickbooks

Same data as JSON: /api/zone/risk?day=2026-09-04&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.