Flagged newborn domains, Sunday, September 6, 2026

685 names at tier high or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highgmail-secure.storescore 55echoes gmail· no web server
brand in the namegmaillure words (login, verify, secure…)secure
Highgmail-secure.xyzscore 55echoes gmail· no web server
brand in the namegmaillure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Highgoogleadswords-supports.comscore 55echoes google
brand in the namegooglelure words (login, verify, secure…)support
Highhttps-hr7fw1-d1-myshopify-com.storescore 55echoes shopify· other
brand in the nameshopifymany hyphens4very long name29brand plus digitshttps-hr7fw1-d1-myshopify-com+2 more

Model opinion: looks like abuse (target: Shopify), confidence 78%. An opinion, not a finding.

Highicloud-review-id54036e42.comscore 55echoes icloud
brand in the nameicloudbrand plus digitsicloud-review-id54036e42brand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo, LLC+1 more
Highjwt-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: suspicious (target: WhatsApp), confidence 60%. An opinion, not a finding.

Highk8s-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappbrand plus digitsk8s-whatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: suspicious (target: WhatsApp), confidence 60%. An opinion, not a finding.

Highkraken-krab1.shopscore 55echoes kraken· empty page
brand in the namekrakenbrand plus digitskraken-krab1brand name behind Cloudflarecloudflare.comform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Highledger-wallet.websitescore 55echoes ledger· no DNS
brand in the nameledgerlure words (login, verify, secure…)wallet
Highlewistrustwallet.comscore 55echoes trustwallet
brand in the nametrustwalletlure words (login, verify, secure…)wallet
Highlogin-cashapp.comscore 55echoes cashapp
brand in the namecashapplure words (login, verify, secure…)login
Highlogin-web-whatsapp.comscore 55echoes whatsapp
brand in the namewhatsapplure words (login, verify, secure…)login
Highloginportal-google.comscore 55echoes google
brand in the namegooglelure words (login, verify, secure…)login,portalbrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITEDbrand name at a watch-list registrarNICENIC INTERNATIONAL GROUP CO., LIMITED
Highmano-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappbrand name at a retail registrarGuizhou Zhongyu Zhike Network Technologyform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 58%. An opinion, not a finding.

Highmercadolibre-ai.comscore 55echoes mercadolibre· blocked the probe
brand in the namemercadolibrebrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc+2 more
Highmfa-whatsapp.comscore 55echoes whatsapp
brand in the namewhatsapplure words (login, verify, secure…)mfa
Highmingshicloud.comscore 55echoes icloud· boilerplate page
brand in the nameicloudbrand name at a retail registrarDropCatch.com 571 LLCidentical page on many newborns179 identical pagesbrand name redirects elsewheredropcatch.com

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highmobile-bri4d.orgscore 55echoes tmobile· empty page
one-letter brand typomobile≈tmobilebrand plus digitsmobile-bri4dbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Inc+1 more

Model opinion: looks like abuse, confidence 63%. An opinion, not a finding.

Highmodavibe-6829-myshopify-com.storescore 55echoes shopify· other
brand in the nameshopifymany hyphens3brand plus digitsmodavibe-6829-myshopify-combrand name at a retail registrarNamify Domains Inc+1 more

Model opinion: looks like abuse (target: Shopify), confidence 72%. An opinion, not a finding.

Highmppaypal.comscore 55echoes paypal· boilerplate page
brand in the namepaypalbrand name at a retail registrarDropCatch.com 505 LLCidentical page on many newborns179 identical pagesbrand name redirects elsewheredropcatch.com

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highmy-telegram.icuscore 55echoes telegram· blocked the probe
brand in the nametelegramTLD with a high abuse rateicubrand name behind Cloudflarecloudflare.combrand in page title, not in the namecloudflare
Highmyaccount-icloud.comscore 55echoes icloud
brand in the nameicloudlure words (login, verify, secure…)accountbrand name behind Cloudflarecloudflare.com
Highn4v3ro48.topscore 55echoes naver· not probed yet
brand spelled with digitsn4v3ro48→naverbrand plus digitsn4v3ro48TLD with a high abuse ratetopbrand name at a retail registrarDominet (HK) Limited
Highnac-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 68%. An opinion, not a finding.

Highnetflixaccountsupport.comscore 55echoes netflix
brand in the namenetflixlure words (login, verify, secure…)account,accounts,support
Highno-reply-amazon.cfdscore 55echoes amazon· server error
brand in the nameamazonTLD with a high abuse ratecfdbrand name behind Cloudflarecloudflare.combrand name and brand-styled pageamazon

Model opinion: looks like abuse (target: Amazon), confidence 78%. An opinion, not a finding.

Highno-reply-amazon.helpscore 55echoes amazon· server error
brand in the nameamazonbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC+1 more

Model opinion: looks like abuse (target: Amazon), confidence 72%. An opinion, not a finding.

Highno-reply-amazon.sbsscore 55echoes amazon· server error
brand in the nameamazonTLD with a high abuse ratesbsbrand name behind Cloudflarecloudflare.combrand name and brand-styled pageamazon

Model opinion: looks like abuse (target: Amazon), confidence 76%. An opinion, not a finding.

Highnoreply-amazon.cfdscore 55echoes amazon· no DNS
brand in the nameamazonTLD with a high abuse ratecfdbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo, LLC+1 more
Highoffice365renewals.sitescore 55echoes office365· boilerplate page
brand in the nameoffice365brand plus digitsoffice365renewalsbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB+1 more

Model opinion: looks like abuse (target: Microsoft), confidence 72%. An opinion, not a finding.

Highpay-by-mobile-casinos-uk.sitescore 55echoes tmobile· boilerplate page
one-letter brand typomobile≈tmobilelure words (login, verify, secure…)paymany hyphens4brand name behind Cloudflarecloudflare.com+2 more

Model opinion: looks like abuse, confidence 76%. An opinion, not a finding.

Highpay-pal-shield.comscore 55echoes paypal
brand in the namepaypallure words (login, verify, secure…)paybrand name behind Cloudflarecloudflare.com
Highpaymentcashapp.xyzscore 55echoes cashapp· not probed yet
brand in the namecashapplure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Highpayval.xyzscore 55echoes paypal· registrar placeholder
one-letter brand typopayval≈paypalTLD with a high abuse ratexyzbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.+1 more

Model opinion: suspicious, confidence 48%. An opinion, not a finding.

Highprovision-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 62%. An opinion, not a finding.

Highreferral-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 62%. An opinion, not a finding.

Highreminder-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 60%. An opinion, not a finding.

Highrevolut-casino-eire-win.sitescore 55echoes revolut· boilerplate page
brand in the namerevolutlure words (login, verify, secure…)winmany hyphens3brand name behind Cloudflarecloudflare.com+2 more

Model opinion: looks like abuse (target: Revolut), confidence 85%. An opinion, not a finding.

Highrouter-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappbrand name at a retail registrarGuizhou Zhongyu Zhike Network Technologyform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: suspicious (target: WhatsApp), confidence 60%. An opinion, not a finding.

Highsalesforce-support.netscore 55echoes salesforce
brand in the namesalesforcelure words (login, verify, secure…)supportbrand name behind Cloudflarecloudflare.com
Highsecure-check-ledger.comscore 55echoes ledger
brand in the nameledgerlure words (login, verify, secure…)secure
Highslackhavens.netscore 55echoes slack· blocked the probe
brand in the nameslackbrand name and brand-styled pageslackform on a brand-styled pagehas_form
Highsonar-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappbrand name at a retail registrarGuizhou Zhongyu Zhike Network Technologyform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 58%. An opinion, not a finding.

Highssstiktok.lolscore 55echoes tiktok· empty page
brand in the nametiktokTLD with a high abuse ratelolbrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.+1 more

Model opinion: looks like abuse (target: TikTok), confidence 62%. An opinion, not a finding.

Highsupport-netflix-compte.comscore 55echoes netflix
brand in the namenetflixlure words (login, verify, secure…)support
Hightiktok8.netscore 55echoes tiktok
brand in the nametiktokbrand plus digitstiktok8brand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Inc+1 more
Hightrezor-suile.orgscore 55echoes trezor· blocked the probe
brand in the nametrezorbrand name behind Cloudflarecloudflare.combrand in page title, not in the namecloudflare
Hightrustwallet-asia.asiascore 55echoes trustwallet· robots.txt denied
brand in the nametrustwalletlure words (login, verify, secure…)walletbrand name behind Cloudflarecloudflare.com
Hightrustwallet-asia.cfdscore 55echoes trustwallet· robots.txt denied
brand in the nametrustwalletlure words (login, verify, secure…)walletTLD with a high abuse ratecfdbrand name behind Cloudflarecloudflare.com
Hightrustwallet-asia.cyouscore 55echoes trustwallet· robots.txt denied
brand in the nametrustwalletlure words (login, verify, secure…)walletTLD with a high abuse ratecyoubrand name behind Cloudflarecloudflare.com

Same data as JSON: /api/zone/risk?day=2026-09-06&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.