Flagged newborn domains, Monday, September 21, 2026

15,107 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highwha-whatsapp.comscore 44echoes whatsapp
brand in the namewhatsappbrand name on a rarely-seen nameserverkenpains.combrand name at a retail registrarGuizhou Zhongyu Zhike Network Technology
Highwhitfieldcranegmail.comscore 44echoes gmail
brand in the namegmailbrand name at a retail registrarWeb Commerce Communications Limited dba brand name at a watch-list registrarWeb Commerce Communications Limited dba
Highzihulu.vipscore 44echoes hulu· no DNS
brand in the namehulubrand name at a retail registrarAlibaba Cloud Computing Ltd. d/b/a HiChibrand name at a watch-list registrarAlibaba Cloud Computing Ltd. d/b/a HiChi
High872313-disconnect.comscore 43· blocked the probe
random-looking nameH=3.62brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highanbenefitstax.appscore 42· active website
page impersonates a brandHMRCbrand in page title, not in the namehmrc

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highappmetrics-cloud.onlinescore 42echoes icloud· no DNS
one-letter brand typocloud≈icloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarRegistrar of Domain Names REG.RU LLC
Highaurastack.linkscore 42· active website
page impersonates a brandPayPalbrand in page title, not in the namepaypal

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highbnpaid.comscore 42· active website
page impersonates a brandBinancebrand in page title, not in the namebinance
Highbookli-bookings.comscore 42echoes booking
one-letter brand typobookings≈bookingbrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.
Highbrieftopaid.appscore 42· active website
page impersonates a brandMicrosoft 365brand in page title, not in the nameoutlook

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highcheckdts.infoscore 42· active website
page impersonates a brandBinancebrand in page title, not in the namebinance

Model opinion: looks like phishing (target: Tether (USDT) / BNB Smart Chain), confidence 62%. An opinion, not a finding.

Highcloud-ai.linkscore 42echoes icloud· boilerplate page
one-letter brand typocloud≈icloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highcloud-data-route.spacescore 42echoes icloud· no DNS
one-letter brand typocloud≈icloudbrand name on a rarely-seen nameserveradminvps.netbrand name at a retail registrarRegistrar of Domain Names REG.RU LLC
Highdigitalnico.shopscore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namewhatsapp

Model opinion: looks like abuse, confidence 75%. An opinion, not a finding.

Highdigitalseller.onlinescore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks like abuse, confidence 70%. An opinion, not a finding.

Highfinance-bykhb.comscore 42echoes binance
one-letter brand typofinance≈binancebrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.
Highfreeman-finance.comscore 42echoes binance
one-letter brand typofinance≈binancebrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.
Highgo2trips.appscore 42· active website
page impersonates a brandPayPalbrand in page title, not in the namepaypal

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highidpu.onescore 42· active website
page impersonates a brandApple IDbrand in page title, not in the nameapple

Model opinion: looks like abuse, confidence 78%. An opinion, not a finding.

Highinterviewsecrets.appscore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namegoogle

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highjunventudejanaoeoqueratatudouma.casascore 42· redirects elsewhere
very long name31brand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highkrupno.appscore 42· active website
page impersonates a brandApple IDbrand in page title, not in the namefacebook

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highmomentum-crypto.proscore 42· active website
page impersonates a brandBinancebrand in page title, not in the nametelegram

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highogstamp.comscore 42· active website
page impersonates a brandPayPalbrand in page title, not in the namepaypal

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highosbookbnb.orgscore 42· active website
page impersonates a brandBinancebrand in page title, not in the namebinance

Model opinion: suspicious (target: Binance), confidence 72%. An opinion, not a finding.

Highpaybrisk.appscore 42· active website
page impersonates a brandPayPalbrand in page title, not in the nameapple

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highpbathe-cloud.comscore 42echoes icloud
one-letter brand typocloud≈icloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.
Highraflistore.techscore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks like abuse, confidence 75%. An opinion, not a finding.

Highreadingdigital.onlinescore 42· active website
page impersonates a brandOffice 365brand in page title, not in the namemicrosoft

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highrevolt.sciencescore 42echoes revolut· no DNS
one-letter brand typorevolt≈revolutbrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.
Highsiluyun.clubscore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highsiluyun.vipscore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highfitauraflow.storescore 40echoes itau· active website
brand in the nameitaubrand name at a retail registrarNamify Domains Incform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highkeystonebay.shopscore 40echoes ebay· registrar placeholder
brand in the nameebayidentical page on many newborns3256 identical pages

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highnexuspsychology.storescore 40echoes usps· blocked the probe
brand in the nameuspsbrand name at a retail registrarGoDaddy.com, LLCform on a brand-styled pagehas_form
Hightrackinglaw.clickscore 40· empty page
lure words (login, verify, secure…)track,trackingTLD with a high abuse rateclickbrand in page title, not in the namegoogle

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highviclouds.websitescore 40echoes icloud· blocked the probe
brand in the nameicloudbrand name at a retail registrarGoDaddy.com, LLCform on a brand-styled pagehas_form
Mediumtiktok.africascore 39echoes tiktok· placeholder page
brand in the nametiktokbrand name behind Cloudflarecloudflare.combrand name at a retail registrarOpenSRSbrand name and brand-styled pagetiktok

Model opinion: suspicious (target: TikTok), confidence 72%. An opinion, not a finding.

Medium0995071.proscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Medium0xbot.exchangescore 38· active website
brand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Medium168p.betscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Medium247marketers.onlinescore 38· active website
brand in page title, not in the namefacebookform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Medium38sy.betscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Medium4the.bestscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Medium8bitdokd.shopscore 38· active website
brand in page title, not in the namexboxform on a brand-styled pagehas_form

Model opinion: looks like phishing (target: 8BitDo), confidence 78%. An opinion, not a finding.

Medium8bitdokkz.shopscore 38· active website
brand in page title, not in the namexboxform on a brand-styled pagehas_form

Model opinion: looks like phishing (target: 8BitDo), confidence 82%. An opinion, not a finding.

Medium8bitduo.shopscore 38· active website
brand in page title, not in the namexboxform on a brand-styled pagehas_form

Model opinion: looks like phishing (target: 8BitDo), confidence 85%. An opinion, not a finding.

Medium968turkbet.comscore 38· blocked the probe
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumaalipay.comscore 38echoes alipay
brand in the namealipaybrand name at a retail registrarTuringSign Inc. d/b/a Cosmotown
Mediumaccountes-apple.comscore 38echoes apple
ambiguous brand wordapplelure words (login, verify, secure…)accountbrand name at a retail registrarDominet (HK) Limited

Same data as JSON: /api/zone/risk?day=2026-09-21&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.