Flagged newborn domains, Monday, September 28, 2026

671 names at tier high or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highsecure-chase-login.bondscore 55echoes chase· no DNS
brand in the name “chase”lure words (login, verify, secure…) “login,secure”TLD with a high abuse rate “bond”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks like abuse (target: Chase (JPMorgan Chase)), confidence 75%. An opinion, not a finding.

Highsecure-chase-login.cyouscore 55echoes chase· no DNS
brand in the name “chase”lure words (login, verify, secure…) “login,secure”TLD with a high abuse rate “cyou”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks like abuse (target: JPMorgan Chase), confidence 80%. An opinion, not a finding.

Highsecure-chase-onlinebanking-com.bondscore 55echoes chase· no DNS
brand in the name “chase”lure words (login, verify, secure…) “secure”many hyphens “3”very long name “30”+2 more

Model opinion: looks like abuse (target: JPMorgan Chase), confidence 80%. An opinion, not a finding.

Highsecureportal-binance.comscore 55echoes binance
brand in the name “binance”lure words (login, verify, secure…) “portal,secure”brand name behind Cloudflare “cloudflare.com”

Model opinion: suspicious (target: binance), confidence 70%. An opinion, not a finding.

Highsecurityaudit-binance.comscore 55echoes binance
brand in the name “binance”lure words (login, verify, secure…) “security”brand name behind Cloudflare “cloudflare.com”

Model opinion: suspicious (target: binance), confidence 90%. An opinion, not a finding.

Highsharepointdocument-verification-1.comscore 55echoes sharepoint
brand in the name “sharepoint”lure words (login, verify, secure…) “verification”very long name “33”brand plus digits “sharepointdocument-verification-1”+1 more

Model opinion: suspicious (target: sharepoint), confidence 76%. An opinion, not a finding.

Highsharepointdocument-verification.icuscore 55echoes sharepoint· boilerplate page
brand in the name “sharepoint”lure words (login, verify, secure…) “verification”very long name “31”TLD with a high abuse rate “icu”+1 more

Model opinion: looks like abuse (target: Microsoft SharePoint), confidence 80%. An opinion, not a finding.

Highstarlink4ddotco.menscore 55echoes starlink· placeholder page
brand in the name “starlink”brand plus digits “starlink4ddotco”TLD with a high abuse rate “men”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: looks like abuse, confidence 70%. An opinion, not a finding.

Highstarlink4dtudei.proscore 55echoes starlink· not probed yet
brand in the name “starlink”brand plus digits “starlink4dtudei”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more

Model opinion: suspicious (target: starlink), confidence 47%. An opinion, not a finding.

Highstarlink4dulti.inkscore 55echoes starlink· placeholder page
brand in the name “starlink”brand plus digits “starlink4dulti”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more

Model opinion: looks like abuse, confidence 47%. An opinion, not a finding.

Highstarlink4dyinni.barscore 55echoes starlink· placeholder page
brand in the name “starlink”brand plus digits “starlink4dyinni”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more

Model opinion: looks like abuse, confidence 48%. An opinion, not a finding.

Highsteam-support.comscore 55echoes steam
brand in the name “steam”lure words (login, verify, secure…) “support”

Model opinion: suspicious (target: steam), confidence 89%. An opinion, not a finding.

Highsupport-lcloud.shopscore 55echoes icloud· not probed yet
one-letter brand typo “lcloud≈icloud”lure words (login, verify, secure…) “support”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Turingsign Inc.”

Model opinion: looks like abuse (target: Apple (iCloud)), confidence 75%. An opinion, not a finding.

Highsupporting-icloud.comscore 55echoes icloud
brand in the name “icloud”lure words (login, verify, secure…) “support”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.S.”

Model opinion: suspicious (target: icloud), confidence 83%. An opinion, not a finding.

Highsupporting-icloud.xyzscore 55echoes icloud· no DNS
brand in the name “icloud”lure words (login, verify, secure…) “support”TLD with a high abuse rate “xyz”

Model opinion: looks like abuse (target: Apple (iCloud)), confidence 70%. An opinion, not a finding.

Highsupportsupport-whatsapp.comscore 55echoes whatsapp
brand in the name “whatsapp”lure words (login, verify, secure…) “support”brand name behind Cloudflare “cloudflare.com”

Model opinion: suspicious (target: whatsapp), confidence 81%. An opinion, not a finding.

Highswervvanguard.netscore 55echoes vanguard· registrar placeholder
brand in the name “vanguard”form on a brand-styled page “has_form”identical page on many newborns “101 identical pages”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Hightaobaops.comscore 55echoes taobao· parked, for sale
brand in the name “taobao”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”+1 more

Model opinion: looks like abuse (target: Taobao), confidence 92%. An opinion, not a finding.

Hightechservicesoutlook.infoscore 55echoes outlook· no web server
brand in the name “outlook”lure words (login, verify, secure…) “service,services”brand name behind Cloudflare “cloudflare.com”

Model opinion: suspicious (target: Microsoft), confidence 55%. An opinion, not a finding.

Hightikt0k.clubscore 55echoes tiktok· other
brand spelled with digits “tikt0k→tiktok”brand plus digits “tikt0k”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more

Model opinion: looks like abuse (target: TikTok), confidence 74%. An opinion, not a finding.

Hightiktokpfd.cfdscore 55echoes tiktok· placeholder page
brand in the name “tiktok”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more

Model opinion: looks like abuse, confidence 51%. An opinion, not a finding.

Hightiktokplus.lolscore 55echoes tiktok· server error
brand in the name “tiktok”TLD with a high abuse rate “lol”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “cloudflare”

Model opinion: looks like abuse (target: TikTok), confidence 68%. An opinion, not a finding.

Hightrackadobe.comscore 55echoes adobe
brand in the name “adobe”lure words (login, verify, secure…) “track”brand name on a rarely-seen nameserver “webrserver.com”

Model opinion: suspicious (target: adobe), confidence 80%. An opinion, not a finding.

Hightrustwalletassets.comscore 55echoes trustwallet
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”brand name behind Cloudflare “cloudflare.com”

Model opinion: suspicious (target: trustwallet), confidence 76%. An opinion, not a finding.

Hightrustwalletpay.storescore 55echoes trustwallet· empty page
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”

Model opinion: looks like abuse (target: Trust Wallet), confidence 72%. An opinion, not a finding.

Highuniswap-verify.bondscore 55echoes uniswap· not probed yet
brand in the name “uniswap”lure words (login, verify, secure…) “verify”TLD with a high abuse rate “bond”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks like abuse (target: Uniswap), confidence 75%. An opinion, not a finding.

Highus44q4.cyouscore 55echoes usaa· boilerplate page
brand spelled with digits “us44q4→usaa”brand plus digits “us44q4”TLD with a high abuse rate “cyou”identical page on many newborns “44 identical pages”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highverifyauth-binance.comscore 55echoes binance
brand in the name “binance”lure words (login, verify, secure…) “verify”brand name on a rarely-seen nameserver “tasjeel.ae”

Model opinion: suspicious (target: binance), confidence 80%. An opinion, not a finding.

Highversandstatus44.infoscore 55echoes usaa· not probed yet
brand spelled with digits “versandstatus44→usaa”brand plus digits “versandstatus44”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Global Domain Group LLC”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highviewview-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”brand name redirects elsewhere “yahoo.com”

Model opinion: looks like abuse (target: WhatsApp), confidence 65%. An opinion, not a finding.

Highwalmart-id.appscore 55echoes walmart· empty page
brand in the name “walmart”lure words (login, verify, secure…) “id”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks like abuse (target: Walmart), confidence 74%. An opinion, not a finding.

Highwalmartoneloginguide.comscore 55echoes walmart
brand in the name “walmart”lure words (login, verify, secure…) “login”

Model opinion: suspicious (target: walmart), confidence 43%. An opinion, not a finding.

Highwalmartproperties.storescore 55echoes walmart· other
brand in the name “walmart”brand name at a retail registrar “Namify Domains Inc”brand in page title, not in the name “cloudflare”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highwinwin-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”brand name redirects elsewhere “yahoo.com”

Model opinion: looks like abuse (target: WhatsApp), confidence 60%. An opinion, not a finding.

Highxsz8-personal-finance-management.topscore 55echoes binance· not probed yet
one-letter brand typo “finance≈binance”many hyphens “3”very long name “32”brand plus digits “xsz8-personal-finance-management”+3 more

Model opinion: unreachable when judged, confidence 60%. An opinion, not a finding.

Highzapp-strips.shopscore 55echoes stripe· registrar placeholder
one-letter brand typo “strips≈stripe”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1041 identical pages”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Highapple-bh6.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-bh6”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”

Model opinion: suspicious (target: Apple), confidence 72%. An opinion, not a finding.

Highapple-jk3.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-jk3”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”

Model opinion: looks like abuse (target: Apple), confidence 60%. An opinion, not a finding.

Highapple-lo5.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-lo5”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”

Model opinion: suspicious (target: Apple), confidence 72%. An opinion, not a finding.

Highapple-oi8.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-oi8”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”

Model opinion: looks like abuse (target: Apple), confidence 60%. An opinion, not a finding.

Highapple-ou9.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-ou9”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”

Model opinion: looks like abuse (target: Apple), confidence 60%. An opinion, not a finding.

Highapple-pl0.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-pl0”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”

Model opinion: looks like abuse (target: Apple), confidence 60%. An opinion, not a finding.

Highapple-ty4.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-ty4”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”

Model opinion: suspicious (target: Apple), confidence 72%. An opinion, not a finding.

Highapple-xh1.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-xh1”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”

Model opinion: suspicious (target: Apple), confidence 72%. An opinion, not a finding.

Highapple-xh2.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-xh2”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”

Model opinion: suspicious (target: Apple), confidence 72%. An opinion, not a finding.

Highcreditoplusenlineaitaucldc5f856dfgh340021bae608a3af039f6.sbsscore 54echoes itau· not probed yet
brand in the name “itau”very long name “56”brand plus digits “creditoplusenlineaitaucldc5f856dfgh34002”TLD with a high abuse rate “sbs”+3 more

Model opinion: suspicious (target: itau), confidence 53%. An opinion, not a finding.

Highcznxgu.topscore 54· redirects elsewhere
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 51%. An opinion, not a finding.

Highhs41-low-cost-cloud-management.topscore 54echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”many hyphens “4”very long name “30”brand plus digits “hs41-low-cost-cloud-management”+1 more

Model opinion: unreachable when judged, confidence 60%. An opinion, not a finding.

Highinstagrami.techscore 54echoes instagram· active website
brand in the name “instagram”form on a brand-styled page “has_form”form submits over plain HTTP “http://instagrami.tech/”

Model opinion: looks like abuse (target: Instagram), confidence 62%. An opinion, not a finding.

Highlianchucklesgmail.emailscore 54echoes gmail· registrar placeholder
brand in the name “gmail”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “2793 identical pages”

Model opinion: looks benign, confidence 61%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-09-28&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.