Flagged newborn domains, Saturday, September 5, 2026

88 names at tier medium or above in .online, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalwhatsappreceptionist.onlinescore 71echoes whatsapp· active website
brand in the namewhatsappbrand name at a retail registrarDominet (HK) Limitedbrand name and brand-styled pagewhatsappform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Criticalmeetmystar.onlinescore 60· active website
page impersonates a brandNetflixbrand in page title, not in the namewhatsappform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 82%. An opinion, not a finding.

Highbetflix-4u.onlinescore 55echoes netflix· registrar placeholder
one-letter brand typobetflix≈netflixbrand plus digitsbetflix-4ubrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highbinancehelpdesk-us.onlinescore 55echoes binance· placeholder page
brand in the namebinancelure words (login, verify, secure…)helpdeskbrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC

Model opinion: looks like abuse (target: Binance), confidence 83%. An opinion, not a finding.

Higheire-revolut-casino-top.onlinescore 55echoes revolut· boilerplate page
brand in the namerevolutmany hyphens3brand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.+3 more

Model opinion: looks like abuse (target: Revolut), confidence 85%. An opinion, not a finding.

Highfedexexpress.onlinescore 55echoes fedex· registrar placeholder
brand in the namefedexbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UABbrand in page title, not in the namehostinger+1 more

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highfidelitydoor.onlinescore 55echoes fidelity· registrar placeholder
brand in the namefidelitybrand name at a retail registrarNics Telekomunikasyon A.S.form on a brand-styled pagehas_form

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highgooqle-mape-live-instant.onlinescore 54echoes google· active website
one-letter brand typogooqle≈googlemany hyphens3brand name behind Cloudflarecloudflare.combrand name at a retail registrarHOSTINGER operations, UAB+1 more

Model opinion: looks like phishing (target: Google), confidence 94%. An opinion, not a finding.

Highwalmart-group.onlinescore 53echoes walmart· active website
brand in the namewalmartbrand name at a retail registrarLigne Web Services SAS dba LWSbrand name and brand-styled pagewalmart

Model opinion: looks like abuse (target: Walmart), confidence 68%. An opinion, not a finding.

Highwhatsappcampaign.onlinescore 53echoes whatsapp· active website
brand in the namewhatsappbrand name at a retail registrarName.com, Inc.brand name and brand-styled pagewhatsapp

Model opinion: looks like abuse (target: WhatsApp), confidence 60%. An opinion, not a finding.

Highd0cusignn.onlinescore 51echoes docusign· placeholder page
brand spelled with digitsd0cusignn→docusignbrand plus digitsd0cusignnbrand name at a retail registrarUltahost, Inc.

Model opinion: looks like abuse (target: DocuSign), confidence 85%. An opinion, not a finding.

Highicloud-fr.onlinescore 50echoes icloud· robots.txt denied
brand in the nameicloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highmapsicloud.onlinescore 50echoes icloud· robots.txt denied
brand in the nameicloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highrevolutioncasino-au.onlinescore 50echoes revolut· active website
brand in the namerevolutbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc

Model opinion: looks like abuse, confidence 70%. An opinion, not a finding.

Highrobinhoodcoin.onlinescore 50echoes robinhood· active website
brand in the namerobinhoodbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC

Model opinion: looks like a scam, confidence 66%. An opinion, not a finding.

Highwbwhatsapp.onlinescore 50echoes whatsapp· placeholder page
brand in the namewhatsappbrand name behind Cloudflarecloudflare.combrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highstrike-consult.onlinescore 46echoes stripe· boilerplate page
one-letter brand typostrike≈stripebrand name at a retail registrarRegional Network Information Center, JSCidentical page on many newborns63 identical pages

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highmogmail.onlinescore 44echoes gmail· no web server
brand in the namegmailbrand name behind Cloudflarecloudflare.combrand name at a retail registrarRegistrar of Domain Names REG.RU LLC
Highrobinhood-memecoins.onlinescore 44echoes robinhood· no DNS
brand in the namerobinhoodbrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITEDbrand name at a watch-list registrarNICENIC INTERNATIONAL GROUP CO., LIMITED
Hightelegrammatka.onlinescore 44echoes telegram· robots.txt denied
brand in the nametelegrambrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Hightotalfaretrack.onlinescore 44· active website
lure words (login, verify, secure…)trackbrand in page title, not in the namebookingform on a brand-styled pagehas_form
Highrobinwood.onlinescore 42echoes robinhood· active website
one-letter brand typorobinwood≈robinhoodbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highsvr-next-cloud.onlinescore 42echoes icloud· no DNS
one-letter brand typocloud≈icloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.
Mediumamexstake.onlinescore 38· blocked the probe
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumashwini.onlinescore 38· active website
brand in page title, not in the namelinkedinform on a brand-styled pagehas_form
Mediumbradenetemprsa.onlinescore 38· redirects elsewhere
brand in page title, not in the namebradescoform on a brand-styled pagehas_form
Mediumbridgehubs.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumbridgesolutions.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumdavalki.onlinescore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumdvizer.onlinescore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumflexbd.onlinescore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumfunbasemig.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumfuntrip.onlinescore 38· active website
brand in page title, not in the namebookingform on a brand-styled pagehas_form
Mediumhookgenerator.onlinescore 38· active website
brand in page title, not in the nameinstagramform on a brand-styled pagehas_form
Mediumhotbots.onlinescore 38· active website
brand in page title, not in the nametelegramform on a brand-styled pagehas_form
Mediumid905634.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumingilizcepb.onlinescore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumjarvissystem.onlinescore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumjodoh88.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumleadsgenpro.onlinescore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediummfagency3.onlinescore 38· redirects elsewhere
brand in page title, not in the namefacebookform on a brand-styled pagehas_form
Mediummilescabgoa.onlinescore 38· active website
brand in page title, not in the namebookingform on a brand-styled pagehas_form
Mediumparssmm.onlinescore 38· redirects elsewhere
brand in page title, not in the nameinstagramform on a brand-styled pagehas_form
Mediumpay2play.onlinescore 38· active website
brand in page title, not in the namesteamform on a brand-styled pagehas_form
Mediumquickrechargeoffers.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumrehbarbeauty.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumsamarpanoldagehome.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumseg-pcotesa-es.onlinescore 38· blocked the probe
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumshopixstore.onlinescore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumsuperpools.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form

Same data as JSON: /api/zone/risk?day=2026-09-05&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.