Flagged newborn domains, Monday, September 28, 2026

2,000 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highyugmail.comscore 44echoes gmail
brand in the name “gmail”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highzlatevicloud.comscore 44echoes icloud
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highabovebeyondseniorservices.orgscore 42· registrar placeholder
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “hostinger”identical page on many newborns “70 identical pages”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Higharyan-cloud.sitescore 42echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.Ş.”
Highbee-matrix.worldscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: suspicious, confidence 67%. An opinion, not a finding.

Highbeixueyun.shopscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highbluepixelbox-boxi.sbsscore 42echoes xbox· no web server
brand in the name “xbox”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Highboomweb.techscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highcapitaloke.comscore 42echoes capitalone
one-letter brand typo “capitaloke≈capitalone”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highcapitalvone.comscore 42echoes capitalone
one-letter brand typo “capitalvone≈capitalone”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highcard-blnance.infoscore 42echoes binance· no web server
one-letter brand typo “blnance≈binance”brand name on a rarely-seen nameserver “1domainregistry.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Highcj-whatsapu.comscore 42echoes whatsapp· no DNS
one-letter brand typo “whatsapu≈whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Chengdu West Dimension Digital Technolog”
Highclashcaocao.netscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 46%. An opinion, not a finding.

Highcoinbnse.comscore 42echoes coinbase
one-letter brand typo “coinbnse≈coinbase”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highcoivbase.comscore 42echoes coinbase
one-letter brand typo “coivbase≈coinbase”brand name on a rarely-seen nameserver “aftermarket.pl”brand name at a retail registrar “Key-Systems GmbH”
Highcoixbase.comscore 42echoes coinbase
one-letter brand typo “coixbase≈coinbase”brand name on a rarely-seen nameserver “aftermarket.pl”brand name at a retail registrar “Key-Systems GmbH”
Highcom-cloud.spacescore 42echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highcrown-capital-finance.comscore 42echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highcuickstart.comscore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highd365ugme.orgscore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 78%. An opinion, not a finding.

Higheuroptv.shopscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Highfiles-cloud.orgscore 42echoes icloud· boilerplate page
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”

Model opinion: looks like abuse, confidence 67%. An opinion, not a finding.

Highgetadflow.appscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: suspicious (target: PayPal), confidence 65%. An opinion, not a finding.

Highhitfortune.orgscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highhoodcars.appscore 42· active website
page impersonates a brand “MetaMask”brand in page title, not in the name “robinhood”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highiflybit.inkscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “tiktok”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highjulian-sterling.comscore 42echoes starling
one-letter brand typo “sterling≈starling”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highkl-whatsapu.comscore 42echoes whatsapp
one-letter brand typo “whatsapu≈whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Chengdu West Dimension Digital Technolog”
Highlarpgod.wtfscore 42· active website
page impersonates a brand “Coinbase”brand in page title, not in the name “coinbase”

Model opinion: looks like abuse (target: Revolut), confidence 77%. An opinion, not a finding.

Highledqger.comscore 42echoes ledger
one-letter brand typo “ledqger≈ledger”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highledqger.onlinescore 42echoes ledger· no web server
one-letter brand typo “ledqger≈ledger”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highlesgazellesdelalys.orgscore 42echoes zelle· active website
brand in the name “zelle”brand name at a retail registrar “OVH sas”brand in page title, not in the name “wordpress”

Model opinion: looks benign, confidence 79%. An opinion, not a finding.

Highlibeme.comscore 42echoes lineme
one-letter brand typo “libeme≈lineme”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highlogdash-cloud.comscore 42echoes icloud
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highlumen-strike.comscore 42echoes stripe
one-letter brand typo “strike≈stripe”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highmobile-car-maintenance.comscore 42echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “IONOS SE”
Highmoonfox-boxi.sbsscore 42echoes xbox· no web server
brand in the name “xbox”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Highmusesplatoon.comscore 42· active website
page impersonates a brand “MetaMask”brand in page title, not in the name “metamask”

Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.

Highnfinity-networks.comscore 42echoes xfinity
one-letter brand typo “nfinity≈xfinity”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highoccupancy-securecheckout-booking.comscore 42echoes booking
ambiguous brand word “booking”lure words (login, verify, secure…) “secure”very long name “32”brand name at a retail registrar “Tucows Domains Inc.”
Highopensi.artscore 42echoes openai· no web server
one-letter brand typo “opensi≈openai”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highopensi.bizscore 42echoes openai· no DNS
one-letter brand typo “opensi≈openai”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Highplanpantalla.onlinescore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highpostback.fitscore 42echoes postbank· robots.txt denied
one-letter brand typo “postback≈postbank”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highpushin.devscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “robinhood”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highpyplconversion.centerscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks like phishing (target: PayPal), confidence 88%. An opinion, not a finding.

Highradarkripto.sitescore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highrevollut.onlinescore 42echoes revolut· robots.txt denied
one-letter brand typo “revollut≈revolut”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highsafehop.appscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “whatsapp”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highserein-cloud.comscore 42echoes icloud
one-letter brand typo “cloud≈icloud”brand name on a rarely-seen nameserver “jdgslb.com”brand name at a retail registrar “Xin Net Technology Corporation”

Same data as JSON: /api/zone/risk?day=2026-09-28&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.