Flagged newborn domains, Saturday, September 12, 2026

2,428 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highamericanexpres-center211.inkscore 44echoes americanexpress· no web server
one-letter brand typoamericanexpres≈americanexpressbrand plus digitsamericanexpres-center211brand name at a retail registrarDominet (HK) Limited
Highamericanexpres-center212.inkscore 44echoes americanexpress· no web server
one-letter brand typoamericanexpres≈americanexpressbrand plus digitsamericanexpres-center212brand name at a retail registrarDominet (HK) Limited
Highamericanexpres-center213.inkscore 44echoes americanexpress· no web server
one-letter brand typoamericanexpres≈americanexpressbrand plus digitsamericanexpres-center213brand name at a retail registrarDominet (HK) Limited
Highamericanexpres-center214.inkscore 44echoes americanexpress· no web server
one-letter brand typoamericanexpres≈americanexpressbrand plus digitsamericanexpres-center214brand name at a retail registrarDominet (HK) Limited
Highamericanexpres-center215.inkscore 44echoes americanexpress· no web server
one-letter brand typoamericanexpres≈americanexpressbrand plus digitsamericanexpres-center215brand name at a retail registrarDominet (HK) Limited
Highamericanexpres-center216.inkscore 44echoes americanexpress· no web server
one-letter brand typoamericanexpres≈americanexpressbrand plus digitsamericanexpres-center216brand name at a retail registrarDominet (HK) Limited
Highamericanexpres-center217.inkscore 44echoes americanexpress· no web server
one-letter brand typoamericanexpres≈americanexpressbrand plus digitsamericanexpres-center217brand name at a retail registrarDominet (HK) Limited
Highamericanexpres-center219.inkscore 44echoes americanexpress· no web server
one-letter brand typoamericanexpres≈americanexpressbrand plus digitsamericanexpres-center219brand name at a retail registrarDominet (HK) Limited
Highamericanexpres-center220.inkscore 44echoes americanexpress· no web server
one-letter brand typoamericanexpres≈americanexpressbrand plus digitsamericanexpres-center220brand name at a retail registrarDominet (HK) Limited
Highamericanexpres-center221.inkscore 44echoes americanexpress· no web server
one-letter brand typoamericanexpres≈americanexpressbrand plus digitsamericanexpres-center221brand name at a retail registrarDominet (HK) Limited
Highamericanexpres-center222.inkscore 44echoes americanexpress· no web server
one-letter brand typoamericanexpres≈americanexpressbrand plus digitsamericanexpres-center222brand name at a retail registrarDominet (HK) Limited
Highamericanexpres-center223.inkscore 44echoes americanexpress· no web server
one-letter brand typoamericanexpres≈americanexpressbrand plus digitsamericanexpres-center223brand name at a retail registrarDominet (HK) Limited
Highamericanexpres-center224.inkscore 44echoes americanexpress· no web server
one-letter brand typoamericanexpres≈americanexpressbrand plus digitsamericanexpres-center224brand name at a retail registrarDominet (HK) Limited
Highchaindrop1.comscore 44· active website
brand in page title, not in the nametelegramform on a brand-styled pagehas_formform submits over plain HTTPhttp://chaindrop1.com/

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highde-blt-panda-view.comscore 44· redirects elsewhere
many hyphens3brand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highexoticfruitdeliveryusa.comscore 44· redirects elsewhere
lure words (login, verify, secure…)deliverybrand in page title, not in the namenationwideform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highfogmail.topscore 44echoes gmail· no DNS
brand in the namegmailTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com
Highgalabetmobile.topscore 44echoes tmobile· not probed yet
brand in the nametmobileTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com
Highhokhoklibr.comscore 44· active website
page asks for credentialsSign in to your accountlogin formhas_form+login words

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highhow-to-really-fish-wiki.wikiscore 44· active website
many hyphens4brand in page title, not in the namerobloxform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 87%. An opinion, not a finding.

Highirisemr.cloudscore 44· active website
page asks for credentialsSign in to your accountlogin formhas_form+login words

Model opinion: looks benign, confidence 78%. An opinion, not a finding.

Highlucasnedra1761.shopscore 44· active website
brand in page title, not in the namenationwideform on a brand-styled pagehas_formform submits over plain HTTPhttps://lucasnedra1761.shop/

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highmcc-kfs.clubscore 44· active website
brand in page title, not in the namemicrosoftform on a brand-styled pagehas_formform submits over plain HTTPhttps://www.mcc-kfs.club/

Model opinion: looks benign, confidence 78%. An opinion, not a finding.

Highmskwb.techscore 44· active website
page asks for credentialsSign in to your accountlogin formhas_form+login words

Model opinion: suspicious, confidence 52%. An opinion, not a finding.

Highnamatrading.proscore 44· active website
page asks for credentialslogin to your accountlogin formhas_form+login words

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highpezoldbettinawordpress.topscore 44echoes wordpress· not probed yet
brand in the namewordpressTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com
Highreddoorlounge.onlinescore 44· active website
page asks for credentialslogin to your accountlogin formhas_form+login words

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highsonaxit.techscore 44· active website
page asks for credentialsSign in to your accountlogin formhas_form+login words

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Hightechwithsalman.onlinescore 44· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_formform submits over plain HTTPhttp://techwithsalman.online/

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highwayneindustry.shopscore 44· active website
page asks for credentialsSign in to your accountlogin formhas_form+login words

Model opinion: suspicious, confidence 58%. An opinion, not a finding.

Highacecambio.proscore 42· active website
page impersonates a brandBinancebrand in page title, not in the namebinance

Model opinion: suspicious (target: Binance), confidence 72%. An opinion, not a finding.

Highbasebadge.onlinescore 42· active website
page impersonates a brandCoinbasebrand in page title, not in the namecoinbase

Model opinion: suspicious (target: Coinbase), confidence 72%. An opinion, not a finding.

Highcarlos-trade.comscore 42· active website
page impersonates a brandBinancebrand in page title, not in the nametelegram

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highclean-cloud-hub.topscore 42echoes icloud· not probed yet
one-letter brand typocloud≈icloudTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com
Highdigitallabshop.storescore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namechatgpt
Highflamerobin.sitescore 42· active website
page impersonates a brandMetaMaskbrand in page title, not in the namerobinhood

Model opinion: looks like a scam, confidence 55%. An opinion, not a finding.

Highflixhype.storescore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highflystreet.sitescore 42· active website
page impersonates a brandCoinbasebrand in page title, not in the namegoogle

Model opinion: looks like a scam, confidence 55%. An opinion, not a finding.

Highfrost.surfscore 42· active website
page impersonates a brandMetaMaskbrand in page title, not in the namemetamask

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highhaxxyexchange.comscore 42· active website
page impersonates a brandPayPalbrand in page title, not in the namepaypal

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highhentairh.sitescore 42· active website
page impersonates a brandMetaMaskbrand in page title, not in the namerobinhood

Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.

Highimports-rlus.shopscore 42· active website
page impersonates a brandUSPSbrand in page title, not in the nameusps

Model opinion: looks like abuse (target: Ralph Lauren), confidence 78%. An opinion, not a finding.

Highinstacarepak.comscore 42· active website
page impersonates a brandUSPSbrand in page title, not in the nameusps

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highjuggerfly.wtfscore 42· active website
page impersonates a brandMetaMaskbrand in page title, not in the namerobinhood

Model opinion: looks like a scam, confidence 55%. An opinion, not a finding.

Highkuklalogistics.comscore 42· active website
page impersonates a brandFedExbrand in page title, not in the namefedex

Model opinion: looks benign, confidence 78%. An opinion, not a finding.

Highmiaura.devscore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namegmail

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highpinksplash.onlinescore 42· active website
page impersonates a brandPayPalbrand in page title, not in the namepaypal

Model opinion: looks like phishing (target: TikTok), confidence 72%. An opinion, not a finding.

Highrandomplayer.appscore 42· active website
page impersonates a brandNetflixbrand in page title, not in the nameapple

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highvirtualads.onlinescore 42· active website
page impersonates a brandPayPalbrand in page title, not in the namepaypal

Model opinion: looks like a scam, confidence 65%. An opinion, not a finding.

Highzyvoo.shopscore 42· active website
page impersonates a brandNetflixbrand in page title, not in the nameamazon

Model opinion: looks like abuse, confidence 55%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-09-12&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.