Flagged newborn domains, Saturday, September 5, 2026

54 names at tier high or above in .top, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalbinancenews.topscore 89echoes binance· active website
brand in the namebinanceTLD with a high abuse ratetopbrand name at a retail registrarGname.com Pte. Ltd.brand name at a watch-list registrarGname.com Pte. Ltd.+2 more

Model opinion: looks like phishing (target: Binance), confidence 68%. An opinion, not a finding.

Criticalyxwwyx.topscore 60· active website
TLD with a high abuse ratetopfree DNS providerdnsowl.combrand in page title, not in the namegoogleform on a brand-styled pagehas_form+1 more

Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.

Highboxbox1223.topscore 55echoes xbox· redirects elsewhere
brand in the namexboxbrand plus digitsboxbox1223TLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com+5 more

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highchatgptai.topscore 55echoes chatgpt· robots.txt denied
brand in the namechatgptTLD with a high abuse ratetopfree DNS providerdnsowl.combrand name at a retail registrarNameSilo,LLC+1 more

Model opinion: suspicious (target: OpenAI ChatGPT), confidence 65%. An opinion, not a finding.

Highlazadaa.topscore 55echoes lazada· empty page
brand in the namelazadaTLD with a high abuse ratetopfree DNS providerdnsowl.combrand name at a retail registrarNameSilo,LLC+1 more

Model opinion: looks like phishing (target: Zalando), confidence 72%. An opinion, not a finding.

Highmatbettelegram.topscore 55echoes telegram· boilerplate page
brand in the nametelegramTLD with a high abuse ratetopbrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITEDbrand name at a watch-list registrarNICENIC INTERNATIONAL GROUP CO., LIMITED+1 more

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highmobile-app-pokerdom1.topscore 55echoes tmobile· boilerplate page
one-letter brand typomobile≈tmobilebrand plus digitsmobile-app-pokerdom1TLD with a high abuse ratetopbrand name at a retail registrarPDR Ltd.+1 more

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Hightrezors.topscore 55echoes trezor· blocked the probe
brand in the nametrezorTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo,LLC+1 more

Model opinion: suspicious (target: Trezor), confidence 72%. An opinion, not a finding.

Highwhatsappapi.topscore 55echoes whatsapp· empty page
brand in the namewhatsappTLD with a high abuse ratetopfree DNS providerdnsowl.combrand name at a retail registrarNameSilo,LLC+2 more

Model opinion: looks like phishing (target: WhatsApp (Meta)), confidence 72%. An opinion, not a finding.

Highwechat2.topscore 54echoes wechat· no DNS
brand in the namewechatbrand plus digitswechat2TLD with a high abuse ratetopbrand name at a retail registrar成都西维数码科技有限公司

Model opinion: suspicious (target: WeChat), confidence 60%. An opinion, not a finding.

Highqctiktok.topscore 52echoes tiktok· robots.txt denied
brand in the nametiktokTLD with a high abuse ratetopbrand name at a retail registrarDynadot LLCbrand name at a watch-list registrarDynadot LLC
Highcontroldynamicupdategatewayvalidationconfirm.topscore 50· blocked the probe
lure words (login, verify, secure…)confirm,update,validationvery long name44TLD with a high abuse ratetopbrand in page title, not in the namecloudflare
Highfirstcontrolmonitoraccountsecurenoticefull.topscore 50· blocked the probe
lure words (login, verify, secure…)account,accounts,securevery long name42TLD with a high abuse ratetopbrand in page title, not in the namecloudflare
Highglobalsecuresessionverifytotalmonitoraccount.topscore 50· blocked the probe
lure words (login, verify, secure…)account,secure,verifyvery long name44TLD with a high abuse ratetopbrand in page title, not in the namecloudflare
Highportalstrongdefensecoreshieldmembersupport.topscore 50· blocked the probe
lure words (login, verify, secure…)member,members,portal,supportvery long name42TLD with a high abuse ratetopbrand in page title, not in the namecloudflare
Highsbrf-cloud.topscore 50echoes icloud· active website
one-letter brand typocloud≈icloudTLD with a high abuse ratetopbrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.

Model opinion: looks like abuse (target: Sberbank), confidence 60%. An opinion, not a finding.

lure words (login, verify, secure…)secure,security,supportvery long name47TLD with a high abuse ratetopbrand in page title, not in the namecloudflare
Highxgdyf.topscore 50· active website
TLD with a high abuse ratetoppage impersonates a brandPayPalbrand in page title, not in the namepaypal
Highartemisbetsanss.topscore 46· blocked the probe
TLD with a high abuse ratetopbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highartemisbetyenii.topscore 46· blocked the probe
TLD with a high abuse ratetopbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highbrackcdn.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form
Highcasino777azino.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks like abuse (target: Azino777), confidence 72%. An opinion, not a finding.

Highcasinobigbola.topscore 46· boilerplate page
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highcasinobuck.topscore 46· boilerplate page
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highcasinofigueira.topscore 46· boilerplate page
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highcasinoknokke.topscore 46· boilerplate page
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highcasinopovoa.topscore 46· boilerplate page
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious (target: Google), confidence 72%. An opinion, not a finding.

Highcasinosieger.topscore 46· boilerplate page
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highcbmakjsjhsad.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highcdnx712.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highdm-pa.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form
Highempirecdn.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highfacebookdw.topscore 46echoes facebook· no DNS
brand in the namefacebookTLD with a high abuse ratetopbrand name at a retail registrarDominet (HK) Limited
Highikimislisans.topscore 46· blocked the probe
TLD with a high abuse ratetopbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highkavbetsanss.topscore 46· blocked the probe
TLD with a high abuse ratetopbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highkingroyal-eylulgiris.topscore 46· blocked the probe
TLD with a high abuse ratetopbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highmietport.topscore 46· blocked the probe
TLD with a high abuse ratetopbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highonline888casino.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highorontosglobalsolutions.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the namespectrumform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 62%. An opinion, not a finding.

Highpablomorales.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the nameinstagramform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highpornomuceni.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highpornoparty.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highpornopohadky.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highposhadvertist.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form
Highprimecellbrasil.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the nameappleform on a brand-styled pagehas_form
Hightajasangbad.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the namewordpressform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Hightikkit.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the nametiktokform on a brand-styled pagehas_form
Highvidpeel.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the namefacebookform on a brand-styled pagehas_form
Highvision2233.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form
Highx7cdnapps.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Same data as JSON: /api/zone/risk?day=2026-09-05&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.