Flagged newborn domains, Friday, September 4, 2026

2,907 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highwhatsapp-w.netscore 44echoes whatsapp
brand in the name “whatsapp”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
Highwhatsapp-web-indonesia.comscore 44echoes whatsapp· empty page
brand in the name “whatsapp”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”

Model opinion: suspicious (target: WhatsApp), confidence 72%. An opinion, not a finding.

Highwhatsapp-web-vietnam.comscore 44echoes whatsapp
brand in the name “whatsapp”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
Highwhatsapp-web.plusscore 44echoes whatsapp· no DNS
brand in the name “whatsapp”brand name at a retail registrar “GNAME.COM PTE. LTD.”brand name at a watch-list registrar “GNAME.COM PTE. LTD.”
Highwhatsappbroker.comscore 44echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Nameslink (Hong Kong) Private Limited”
Highwordpressachplugin.comscore 44echoes wordpress
brand in the name “wordpress”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
Highworkwechat.netscore 44echoes wechat
brand in the name “wechat”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highwwvww-facebook.comscore 44echoes facebook
brand in the name “facebook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highyyw-cloud.xyzscore 44echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highzellebot-ai.comscore 44echoes zelle
brand in the name “zelle”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highzihan-cloud.xyzscore 44echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highzkwap-finance.xyzscore 44echoes binance· not probed yet
one-letter brand typo “finance≈binance”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highadeyinkaadebayogeneralhospital.orgscore 42echoes ebay· registrar placeholder
brand in the name “ebay”very long name “30”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highainance.orgscore 42echoes binance· parked, for sale
one-letter brand typo “ainance≈binance”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highallinone-cloud.onlinescore 42echoes icloud· active website
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highapp-lcloud.helpscore 42echoes icloud· empty page
one-letter brand typo “lcloud≈icloud”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”

Model opinion: looks like phishing (target: Apple (iCloud)), confidence 72%. An opinion, not a finding.

Highartificialinu.storescore 42· active website
page impersonates a brand “MetaMask”brand in page title, not in the name “opensea”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highbest-whtsapp.comscore 42echoes whatsapp
one-letter brand typo “whtsapp≈whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
Highbilatbaho.techscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks like phishing (target: Netflix), confidence 62%. An opinion, not a finding.

Highbooklng-arrlve.comscore 42echoes booking
one-letter brand typo “booklng≈booking”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “OwnRegistrar, Inc.”
Highboring-finance.comscore 42echoes binance
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highbowking.appscore 42echoes booking· no DNS
one-letter brand typo “bowking≈booking”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “CloudFlare, Inc.”
Highcdn-shopiify.comscore 42echoes shopify
one-letter brand typo “shopiify≈shopify”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highcloud-ace.techscore 42echoes icloud· robots.txt denied
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highcloud-finops.onlinescore 42echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highcloud-perkin.comscore 42echoes icloud
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highcloud.futbolscore 42echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highcloudalipaytun.topscore 42echoes alipay· server error
brand in the name “alipay”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo,LLC”+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highcoinsclash.appscore 42· active website
page impersonates a brand “MetaMask”brand in page title, not in the name “metamask”

Model opinion: suspicious (target: MetaMask), confidence 72%. An opinion, not a finding.

Highdentalos.spacescore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “shopify”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highdivn.onlinescore 42· active website
page impersonates a brand “MetaMask”brand in page title, not in the name “robinhood”

Model opinion: looks like a scam, confidence 76%. An opinion, not a finding.

Highdmsglobal-cloud.comscore 42echoes icloud
one-letter brand typo “cloud≈icloud”brand name on a rarely-seen nameserver “com.co”brand name at a retail registrar “Hello Internet Corp”
Highfinance-eunt.livingscore 42echoes binance· blocked the probe
one-letter brand typo “finance≈binance”brand name at a retail registrar “NAMECHEAP”brand name at a watch-list registrar “NAMECHEAP”
Highgalaxytriangle.topscore 42· active website
TLD with a high abuse rate “top”page pushes urgent payment “risk-free”brand in page title, not in the name “robinhood”

Model opinion: looks like phishing (target: Robinhood), confidence 75%. An opinion, not a finding.

Highgiftkey.sitescore 42· active website
page impersonates a brand “Apple ID”brand in page title, not in the name “apple”

Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.

Highglow-bookings.comscore 42echoes booking
one-letter brand typo “bookings≈booking”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highgodz-casino-online.inkscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highgruapp.devscore 42· active website
page impersonates a brand “Apple ID”brand in page title, not in the name “apple”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highgulf-ledgers.comscore 42echoes ledger
one-letter brand typo “ledgers≈ledger”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highharz-cloud.comscore 42echoes icloud
one-letter brand typo “cloud≈icloud”brand name on a rarely-seen nameserver “awsdns-00.org”brand name at a retail registrar “Amazon Registrar, Inc.”
Highhttpadminshopifycomjmny.storescore 42echoes shopify· other
brand in the name “shopify”brand name at a retail registrar “Namify Domains Inc”brand in page title, not in the name “cloudflare”
Highhustle-energy.sitescore 42· active website
page impersonates a brand “FedEx”brand in page title, not in the name “fedex”
Highicicibankrewards.comscore 42· registrar placeholder
lure words (login, verify, secure…) “reward,rewards”brand in page title, not in the name “hostinger”identical page on many newborns “23 identical pages”
Highindianapolis-concrete-company.comscore 42· active website
very long name “29”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Highinsigniafiretv.orgscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “amazon”
Highisitascam.appscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “instagram”
Highjosephmarler.onlinescore 42· active website
page impersonates a brand “Office 365”brand in page title, not in the name “microsoft”
Highkiran-cloud.comscore 42echoes icloud
one-letter brand typo “cloud≈icloud”brand name on a rarely-seen nameserver “awsdns-32.com”brand name at a retail registrar “GoDaddy.com, LLC”
Highlcloud-shop.comscore 42echoes icloud
one-letter brand typo “lcloud≈icloud”brand name on a rarely-seen nameserver “supvipdn.pro”brand name at a retail registrar “Internet Domain Service BS Corp”
Highledgerclean.appscore 42· active website
page impersonates a brand “Chase Bank”brand in page title, not in the name “quickbooks”

Same data as JSON: /api/zone/risk?day=2026-09-04&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.