Flagged newborn domains, Friday, September 25, 2026

11,420 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highhggrouproblox.comscore 44echoes roblox
brand in the name “roblox”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highhuddle-slack.comscore 44echoes slack
brand in the name “slack”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
Highhuolalachatgpt.comscore 44echoes chatgpt
brand in the name “chatgpt”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highicloud-finde-app.sitescore 44echoes icloud· no DNS
brand in the name “icloud”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highicloud-finde-appe.onlinescore 44echoes icloud· no DNS
brand in the name “icloud”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highinfinoportal.storescore 44· redirects elsewhere
lure words (login, verify, secure…) “portal”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highinstantcomptantebay.comscore 44echoes ebay
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highintuitappointmentassist.comscore 44echoes intuit
brand in the name “intuit”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highintuitemerchant.onlinescore 44echoes intuit· placeholder page
brand in the name “intuit”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highintuitiondesoi.comscore 44echoes intuit
brand in the name “intuit”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “URL Solutions, Inc.”
Highintuitionrsi.comscore 44echoes intuit
brand in the name “intuit”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highintuitiveeater.comscore 44echoes intuit
brand in the name “intuit”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highintuitivesuperintelligence.comscore 44echoes intuit
brand in the name “intuit”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highiqlinkedin.comscore 44echoes linkedin
brand in the name “linkedin”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highjasaseogoogle.comscore 44echoes google· active website
brand in the name “google”brand name on a rarely-seen nameserver “serverhostgroup.com”brand name at a retail registrar “DomainRegistry.com LLC”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highjevforgmail.comscore 44echoes gmail
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Key-Systems GmbH”
Highjevforlinkedin.comscore 44echoes linkedin
brand in the name “linkedin”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highkbemicrosoft.comscore 44echoes microsoft
brand in the name “microsoft”brand name on a rarely-seen nameserver “dnsexit.com”brand name at a retail registrar “Netdorm, Inc. dba DnsExit.com”
Highkplgmail.comscore 44echoes gmail
brand in the name “gmail”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highlacoste-gsm-ss24.comscore 44echoes laposte
one-letter brand typo “lacoste≈laposte”brand plus digits “lacoste-gsm-ss24”brand name at a retail registrar “Tucows Domains Inc.”
Highlazada-sellercenter.fitscore 44echoes lazada· active website
brand in the name “lazada”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.

Highlevelsoffidelity.comscore 44echoes fidelity
brand in the name “fidelity”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “URL Solutions, Inc.”
Highlid-era-rte-life.appscore 44· active website
many hyphens “3”brand in page title, not in the name “instagram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highmanage-schwab.comscore 44echoes schwab
brand in the name “schwab”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highmetaagentmobile.comscore 44echoes tmobile
brand in the name “tmobile”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highmsdigicloud.onlinescore 44echoes icloud· not probed yet
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Register SPA”
Highmynewgoogle.helpscore 44echoes google· no web server
brand in the name “google”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highnetflixsettlementsucks.comscore 44echoes netflix
brand in the name “netflix”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highofficialmonetatei.onlinescore 44· blocked the probe
lure words (login, verify, secure…) “official”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highofficialmonetatei.websitescore 44· blocked the probe
lure words (login, verify, secure…) “official”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highomxtrade.livescore 44· active website
page asks for credentials “Login to your account”login form “has_form+login words”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highopenai-hr.comscore 44echoes openai
brand in the name “openai”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highopenai66.comscore 44echoes openai
brand in the name “openai”brand plus digits “openai66”brand name behind Cloudflare “cloudflare.com”
Highopenaicafe.onlinescore 44echoes openai· active website
brand in the name “openai”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highopenaiuniverse.comscore 44echoes openai
brand in the name “openai”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highopencart-chatgpt.comscore 44echoes chatgpt
brand in the name “chatgpt”brand name on a rarely-seen nameserver “gotobg.net”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Highopenseaimports.cloudscore 44echoes opensea· robots.txt denied
brand in the name “opensea”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highphantiktok.comscore 44echoes tiktok
brand in the name “tiktok”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highportalinmobiliariobolivia.casascore 44· active website
lure words (login, verify, secure…) “portal”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: suspicious (target: WhatsApp), confidence 72%. An opinion, not a finding.

Highprotect-outlook.comscore 44echoes outlook
brand in the name “outlook”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highq-whatsapp.comscore 44echoes whatsapp
brand in the name “whatsapp”brand name on a rarely-seen nameserver “kenpains.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
Highquickbooksbookingassist.comscore 44echoes quickbooks
brand in the name “quickbooks”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highquickbooksmeetingassist.comscore 44echoes quickbooks
brand in the name “quickbooks”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highquickbooksscheduleassist.comscore 44echoes quickbooks
brand in the name “quickbooks”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highrakiuten.clickscore 44echoes rakuten· empty page
one-letter brand typo “rakiuten≈rakuten”TLD with a high abuse rate “click”brand name at a retail registrar “NameMart Pte. Ltd.”

Model opinion: looks like abuse (target: Rakuten), confidence 77%. An opinion, not a finding.

Highreceipts-ar-linkedin.comscore 44echoes linkedin
brand in the name “linkedin”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highrevolut-belg.comscore 44echoes revolut
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “URL Solutions, Inc.”
Highrevolut-dk.comscore 44echoes revolut
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “URL Solutions, Inc.”
Highrevolut-es.comscore 44echoes revolut
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “URL Solutions, Inc.”
Highrevolut-fr.comscore 44echoes revolut
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “URL Solutions, Inc.”

Same data as JSON: /api/zone/risk?day=2026-09-25&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.