Flagged newborn domains, Tuesday, September 15, 2026

2,073 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highalaibetsy.clubscore 50echoes etsy· not probed yet
brand in the nameetsybrand name behind Cloudflarecloudflare.combrand name at a retail registrarGname.com Pte. Ltd.brand name at a watch-list registrarGname.com Pte. Ltd.
Highapi-trezor.comscore 50echoes trezor
brand in the nametrezorbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITEDbrand name at a watch-list registrarNICENIC INTERNATIONAL GROUP CO., LIMITED
Highasa-tyre-recovery.sitescore 50· active website
lure words (login, verify, secure…)recover,recoverybrand in page title, not in the namewordpressform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highbetflix.homesscore 50echoes netflix· not probed yet
one-letter brand typobetflix≈netflixTLD with a high abuse ratehomesbrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highboostnetjc.lolscore 50· active website
TLD with a high abuse ratelolpage impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highchatgptvpn.clubscore 50echoes chatgpt· no DNS
brand in the namechatgptbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highclientsamazon.vipscore 50echoes amazon· no DNS
brand in the nameamazonbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGname.com Pte. Ltd.brand name at a watch-list registrarGname.com Pte. Ltd.
Highcloud-orchardcore.clickscore 50echoes icloud· no web server
one-letter brand typocloud≈icloudTLD with a high abuse rateclickbrand name at a retail registrarDynadot, LLCbrand name at a watch-list registrarDynadot, LLC
Highcloud-willowpoint.clickscore 50echoes icloud· no web server
one-letter brand typocloud≈icloudTLD with a high abuse rateclickbrand name at a retail registrarDynadot, LLCbrand name at a watch-list registrarDynadot, LLC
Highconnovexbox.comscore 50echoes xbox
brand in the namexboxbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highdevicesrevolut.comscore 50echoes revolut
brand in the namerevolutbrand name on a rarely-seen nameservernsnamedns.netbrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITEDbrand name at a watch-list registrarNICENIC INTERNATIONAL GROUP CO., LIMITED
Highdirect-icloud-live.appscore 50echoes icloud· robots.txt denied
brand in the nameicloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarSav.com, LLCbrand name at a watch-list registrarSav.com, LLC
Highdocusignadmin.onlinescore 50echoes docusign· not probed yet
brand in the namedocusignbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC
Highdungeonbattlevanguard.blogscore 50echoes vanguard· not probed yet
brand in the namevanguardbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNamecheapbrand name at a watch-list registrarNamecheap
Highecomjords-myshopify.storescore 50echoes shopify· other
brand in the nameshopifybrand in page title, not in the namecloudflare

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Higheliotshopify.storescore 50echoes shopify· other
brand in the nameshopifybrand in page title, not in the namecloudflare

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highenterpriseseoauditservices.comscore 50· active website
lure words (login, verify, secure…)service,servicesbrand in page title, not in the namenationwideform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highfestivegazelle.proscore 50echoes zelle· robots.txt denied
brand in the namezellebrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highgardensbylhebay.comscore 50echoes ebay
brand in the nameebaybrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highgdpr-google.comscore 50echoes google
brand in the namegooglebrand name behind Cloudflarecloudflare.combrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITEDbrand name at a watch-list registrarNICENIC INTERNATIONAL GROUP CO., LIMITED
Highglados.cfdscore 50· active website
TLD with a high abuse ratecfdpage impersonates a brandNetflixbrand in page title, not in the namechatgpt

Model opinion: looks like abuse (target: GLaDOS (机场/VPN service)), confidence 60%. An opinion, not a finding.

Highgooglepaten.comscore 50echoes google
brand in the namegooglebrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highgoogleplayhappy.comscore 50echoes google
brand in the namegooglebrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highhashrabbits.funscore 50· active website
TLD with a high abuse ratefunpage impersonates a brandMetaMaskbrand in page title, not in the namerobinhood

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highhelp-centreservice.shopscore 50· redirects elsewhere
lure words (login, verify, secure…)help,servicebrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 62%. An opinion, not a finding.

Highhttpsiboardup-phoenixfrayrojas1327chatgpt.sitescore 50echoes chatgpt· excluded
brand in the namechatgptvery long name41brand plus digitshttpsiboardup-phoenixfrayrojas1327chatgpbrand name at a retail registrarGoDaddy.com, LLC

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highhttpworkbench-sh3d0w-walmart.comscore 50echoes walmart
brand in the namewalmartvery long name28brand plus digitshttpworkbench-sh3d0w-walmartbrand name at a retail registrarUltahost, Inc.
Highhub-shorepoint.clickscore 50echoes sharepoint· no web server
one-letter brand typoshorepoint≈sharepointTLD with a high abuse rateclickbrand name at a retail registrarDynadot, LLCbrand name at a watch-list registrarDynadot, LLC
Highhulubo.comscore 50echoes hulu
brand in the namehulubrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highhulukinta.comscore 50echoes hulu· no DNS
brand in the namehulubrand name on a rarely-seen nameservermschosting.cloudbrand name at a retail registrarWeb Commerce Communications Limited dba brand name at a watch-list registrarWeb Commerce Communications Limited dba
Highhuluwev.infoscore 50echoes hulu· not probed yet
brand in the namehulubrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highi-dont-have-linkedin.comscore 50echoes linkedin
brand in the namelinkedinmany hyphens3brand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLC
Highinformationrevolut.comscore 50echoes revolut
brand in the namerevolutbrand name on a rarely-seen nameservernsnamedns.netbrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITEDbrand name at a watch-list registrarNICENIC INTERNATIONAL GROUP CO., LIMITED
Highinsight-shorepoint.clickscore 50echoes sharepoint· no web server
one-letter brand typoshorepoint≈sharepointTLD with a high abuse rateclickbrand name at a retail registrarDynadot, LLCbrand name at a watch-list registrarDynadot, LLC
Highjngservicesllc.comscore 50· active website
lure words (login, verify, secure…)service,servicesbrand in page title, not in the namewhatsappform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highkluxbox.onlinescore 50echoes xbox· empty page
brand in the namexboxbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc

Model opinion: unreachable when judged, confidence 70%. An opinion, not a finding.

Highla-fabric-shop-shopify.comscore 50echoes shopify
brand in the nameshopifymany hyphens3brand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.
Highmicrosoftsteam.onlinescore 50echoes microsoft· not probed yet
brand in the namemicrosoftbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC
Highminhphatmobile.spacescore 50echoes tmobile· not probed yet
brand in the nametmobilebrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highmobile-4you.comscore 50echoes tmobile
one-letter brand typomobile≈tmobilebrand plus digitsmobile-4youbrand name on a rarely-seen nameserverawsdns-21.combrand name at a retail registrarAmazon Registrar, Inc.
Highmobile-pd.comscore 50echoes tmobile· redirects elsewhere
one-letter brand typomobile≈tmobilebrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.brand name redirects elsewheremobilepd.org

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Highnaiyunjc.sbsscore 50· active website
TLD with a high abuse ratesbspage impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highnaiyuntz.sbsscore 50· active website
TLD with a high abuse ratesbspage impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highnetflixpartys.comscore 50echoes netflix
brand in the namenetflixbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDEVEXPANSE LTD d/b/a Regery.combrand name at a watch-list registrarDEVEXPANSE LTD d/b/a Regery.com
Highneuron-shorepoint.clickscore 50echoes sharepoint· no web server
one-letter brand typoshorepoint≈sharepointTLD with a high abuse rateclickbrand name at a retail registrarDynadot, LLCbrand name at a watch-list registrarDynadot, LLC
Highnexora.datescore 50· active website
TLD with a high abuse ratedatepage impersonates a brandBinancebrand in page title, not in the namebinance

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highopen-ai-japan.sitescore 50echoes openai· not probed yet
brand in the nameopenaibrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.
Highpeakrobinhood.financescore 50echoes robinhood· not probed yet
brand in the namerobinhoodbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC
Highplay-google.clubscore 50echoes google· not probed yet
brand in the namegooglebrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highpukkagmail.collegescore 50echoes gmail· not probed yet
brand in the namegmailbrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.

Same data as JSON: /api/zone/risk?day=2026-09-15&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.