Flagged newborn domains, Friday, September 25, 2026

11,420 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highkuaileigo.sitescore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Highlarada.orgscore 42echoes lazada· no DNS
one-letter brand typo “larada≈lazada”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highlcloud-com.infoscore 42echoes icloud· robots.txt denied
one-letter brand typo “lcloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Highlcloud-devices.devscore 42echoes icloud· not probed yet
one-letter brand typo “lcloud≈icloud”brand name at a retail registrar “Dynadot LLC.”brand name at a watch-list registrar “Dynadot LLC.”
Highlcloud-fmi-fr.livescore 42echoes icloud· not probed yet
one-letter brand typo “lcloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “OwnRegistrar, Inc.”
Highleposte.netscore 42echoes laposte
one-letter brand typo “leposte≈laposte”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highlistq.orgscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”
Highlkproductions.shopscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “roblox”
Highlotte-finance.onlinescore 42echoes binance· not probed yet
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
Highlusta.orgscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”
Highmander-finance.comscore 42echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highmintaka.tradescore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “telegram”
Highmitcevpn.onlinescore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Highmitcevpn.websitescore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Highmobile-expressauth.comscore 42echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highmobile-nohu.comscore 42echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Name.com, Inc.”
Highmobile-parimatch.orgscore 42echoes tmobile· no DNS
one-letter brand typo “mobile≈tmobile”brand name on a rarely-seen nameserver “rayname.com”brand name at a retail registrar “July Name Limited”
Highmofos.worldscore 42· active website
page impersonates a brand “MetaMask”brand in page title, not in the name “robinhood”
Highmonas.familyscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “robinhood”
Highmulticloudledge.lolscore 42echoes icloud· no DNS
brand in the name “icloud”TLD with a high abuse rate “lol”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”+1 more
Highmxhljk.wikiscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Highneural-networks-finance.comscore 42echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highnew-mobile-casino.netscore 42echoes tmobile· active website
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highnew-pinup-mobile.topscore 42echoes tmobile· empty page
one-letter brand typo “mobile≈tmobile”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highnorthwest-finance.comscore 42echoes binance
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Highomega-cloud.spacescore 42echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highonedrlve-share.netscore 42echoes onedrive
one-letter brand typo “onedrlve≈onedrive”brand name on a rarely-seen nameserver “awsdns-04.com”brand name at a retail registrar “Amazon Registrar, Inc.”
Highoogle.systemsscore 42echoes google· not probed yet
one-letter brand typo “oogle≈google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “OwnRegistrar, Inc.”
Highpaycharge.appscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”
Highpipsignal.livescore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”
Highpostal-warrant.comscore 42echoes postnl
one-letter brand typo “postal≈postnl”brand name on a rarely-seen nameserver “namegear.co”brand name at a retail registrar “BR domain Inc. dba namegear.co”
Highpotionospeayv.boatsscore 42echoes ionos· no DNS
brand in the name “ionos”TLD with a high abuse rate “boats”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”+1 more
Highprimeamzproservices.infoscore 42· boilerplate page
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “amazon”identical page on many newborns “64 identical pages”
Highqidelity.comscore 42echoes fidelity· no DNS
one-letter brand typo “qidelity≈fidelity”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highrevolt.betscore 42echoes revolut· robots.txt denied
one-letter brand typo “revolt≈revolut”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highrobinhoob.casascore 42echoes robinhood· not probed yet
one-letter brand typo “robinhoob≈robinhood”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Highschwbab.orgscore 42echoes schwab· not probed yet
one-letter brand typo “schwbab≈schwab”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Highshanto.storescore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “whatsapp”
Highsibahe.xyzscore 42· active website
TLD with a high abuse rate “xyz”page pushes urgent payment “risk-free”brand in page title, not in the name “robinhood”
Highsiga-cloud.comscore 42echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highsnarling.storescore 42echoes starling· placeholder page
one-letter brand typo “snarling≈starling”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highstarking.cloudscore 42echoes starling· no web server
one-letter brand typo “starking≈starling”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “DNSPod, Inc.”
Highstarline-logisys.comscore 42echoes starling
one-letter brand typo “starline≈starling”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Highstartlink.onlinescore 42echoes starlink· robots.txt denied
one-letter brand typo “startlink≈starlink”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highsterling-heritage.comscore 42echoes starling
one-letter brand typo “sterling≈starling”brand name on a rarely-seen nameserver “hlogicdock.cloud”brand name at a retail registrar “TuringSign Inc. d/b/a Cosmotown”
Highstride.surfscore 42echoes stripe· empty page
one-letter brand typo “stride≈stripe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Hightalentpay-finance.comscore 42echoes binance
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “OpusDNS GmbH”
Hightelegrom.infoscore 42echoes telegram· no DNS
one-letter brand typo “telegrom≈telegram”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Hightenevs.familyscore 42· active website
page impersonates a brand “MetaMask”brand in page title, not in the name “robinhood”
Highthemis.tradescore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Same data as JSON: /api/zone/risk?day=2026-09-25&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.