Flagged newborn domains, Friday, September 4, 2026

2,907 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highgoogl-ticket-smtp382.comscore 50echoes google
one-letter brand typo “googl≈google”brand plus digits “googl-ticket-smtp382”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highgrove-gazelle.comscore 50echoes zelle
brand in the name “zelle”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highharbor-gazelle.comscore 50echoes zelle
brand in the name “zelle”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highhongxingyun.lolscore 50· active website
TLD with a high abuse rate “lol”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 68%. An opinion, not a finding.

Highicloud-fmip.netscore 50echoes icloud
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highintuitivelydriven.infoscore 50echoes intuit· no DNS
brand in the name “intuit”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highisle-gazelle.comscore 50echoes zelle
brand in the name “zelle”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highjsdevetsy.comscore 50echoes etsy
brand in the name “etsy”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highkfoo.clickscore 50· active website
TLD with a high abuse rate “click”page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: suspicious (target: Binance), confidence 72%. An opinion, not a finding.

Highlazada.codesscore 50echoes lazada· active website
brand in the name “lazada”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more

Model opinion: suspicious (target: Lazada), confidence 68%. An opinion, not a finding.

Highmercado-libre-ar.onlinescore 50echoes mercadolibre· no DNS
brand in the name “mercadolibre”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highmizuhl.xyzscore 50echoes mizuho· active website
one-letter brand typo “mizuhl≈mizuho”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highmountain-gazelle.comscore 50echoes zelle
brand in the name “zelle”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highnightfuryx.lolscore 50· active website
TLD with a high abuse rate “lol”page impersonates a brand “Netflix”brand in page title, not in the name “chatgpt”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Highnotanothergmail.comscore 50echoes gmail
brand in the name “gmail”brand name on a rarely-seen nameserver “messagingengine.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highnvdamaxi.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Coinbase”brand in page title, not in the name “coinbase”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highopenairmag.comscore 50echoes openai
brand in the name “openai”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highopensea-hub.inkscore 50echoes opensea· no DNS
brand in the name “opensea”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
Highp-cloud.topscore 50echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “top”brand name at a retail registrar “NameSilo,LLC”brand name at a watch-list registrar “NameSilo,LLC”
Highpandaicloud.infoscore 50echoes icloud· robots.txt denied
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highpostage-usps.comscore 50echoes usps
brand in the name “usps”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
Highrakutena.comscore 50echoes rakuten
brand in the name “rakuten”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
Highrevolut-pl.comscore 50echoes revolut
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highrevolut-pl.livescore 50echoes revolut· no DNS
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highrevolutioncasino.proscore 50echoes revolut· blocked the probe
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highrobinhoodledger.comscore 50echoes robinhood
brand in the name “robinhood”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highrobinshood.funscore 50echoes robinhood· empty page
one-letter brand typo “robinshood≈robinhood”TLD with a high abuse rate “fun”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highrobloxtest.bestscore 50echoes roblox· robots.txt denied
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highrtpstarlink4dcuan.topscore 50echoes starlink· active website
brand in the name “starlink”brand plus digits “rtpstarlink4dcuan”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: looks like abuse, confidence 88%. An opinion, not a finding.

Highrtpstarlink4dgas.topscore 50echoes starlink· active website
brand in the name “starlink”brand plus digits “rtpstarlink4dgas”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Highrtpstarlink4dno1.topscore 50echoes starlink· active website
brand in the name “starlink”brand plus digits “rtpstarlink4dno1”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Highspinbit-au.onlinescore 50echoes itau· blocked the probe
brand in the name “itau”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highspotifypremiumapkk.comscore 50echoes spotify
brand in the name “spotify”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highspring-gazelle.comscore 50echoes zelle· placeholder page
brand in the name “zelle”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: suspicious (target: Zelle), confidence 60%. An opinion, not a finding.

Highstaronrobinhood.comscore 50echoes robinhood
brand in the name “robinhood”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highstripedblanket.comscore 50echoes stripe
brand in the name “stripe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highstrive-ahead2025.proscore 50echoes stripe· active website
one-letter brand typo “strive≈stripe”brand plus digits “strive-ahead2025”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Hightcglike.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Binance”brand in page title, not in the name “coinbase”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highteamlink.onlinescore 50· active website
page asks for credentials “Verify Your Identity”brand in page title, not in the name “microsoft”

Model opinion: looks like phishing (target: Microsoft), confidence 93%. An opinion, not a finding.

Hightelegramcode.comscore 50echoes telegram
brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Hightelegramvideogenerator.comscore 50echoes telegram
brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highthicket-gazelle.comscore 50echoes zelle
brand in the name “zelle”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Hightiktokhi.sitescore 50echoes tiktok· empty page
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”

Model opinion: looks like abuse (target: TikTok), confidence 82%. An opinion, not a finding.

Hightiktoksshop.comscore 50echoes tiktok
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
Highvanguarddumpsterrental.comscore 50echoes vanguard
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highvotes-irobinhood.comscore 50echoes robinhood
brand in the name “robinhood”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highvvww-icloud.comscore 50echoes icloud
brand in the name “icloud”brand name on a rarely-seen nameserver “ssdns.online”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highw-jkc.homesscore 50· active website
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highwind-gazelle.comscore 50echoes zelle
brand in the name “zelle”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highxxai.lolscore 50· active website
TLD with a high abuse rate “lol”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 76%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-09-04&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.