Flagged newborn domains, Monday, September 28, 2026

2,000 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highusecheque.funscore 46· active website
TLD with a high abuse rate “fun”brand in page title, not in the name “instagram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highuzb-2026vote.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 48%. An opinion, not a finding.

Highuzb-k2026.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 54%. An opinion, not a finding.

Highuzb-konk-26.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 48%. An opinion, not a finding.

Highuzb-vote-26.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 49%. An opinion, not a finding.

Highuzb-vote2026.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 45%. An opinion, not a finding.

Highuzb2026-v.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 61%. An opinion, not a finding.

Highuzbkonk-2026.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 56%. An opinion, not a finding.

Highuzbv-2026.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 54%. An opinion, not a finding.

Highuzbv-26v.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 58%. An opinion, not a finding.

Highuzbvot-2026.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 43%. An opinion, not a finding.

Highuzbvot-k.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 54%. An opinion, not a finding.

Highuzbvot2026.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 51%. An opinion, not a finding.

Highuzbvote-26.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 42%. An opinion, not a finding.

Highvegamoviess.camscore 46· active website
TLD with a high abuse rate “cam”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.

Highvivyx.funscore 46· redirects elsewhere
TLD with a high abuse rate “fun”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 78%. An opinion, not a finding.

Highvote-uzb2.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 40%. An opinion, not a finding.

Highvoteuzb-26.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 50%. An opinion, not a finding.

Highvoting-uzb.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 52%. An opinion, not a finding.

Highwadofitonira.lolscore 46· redirects elsewhere
TLD with a high abuse rate “lol”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 50%. An opinion, not a finding.

Highwhaletect.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highwordpress2emdash.comscore 46echoes wordpress
brand in the name “wordpress”brand plus digits “wordpress2emdash”brand name at a retail registrar “GoDaddy.com, LLC”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

High1975-finance.comscore 44echoes binance
one-letter brand typo “finance≈binance”brand plus digits “1975-finance”brand name at a retail registrar “Infomaniak Network SA”

Model opinion: looks like abuse, confidence 49%. An opinion, not a finding.

Highaerosky.appscore 44· active website
page asks for credentials “Sign in to your account”login form “has_form+login words”

Model opinion: looks benign, confidence 89%. An opinion, not a finding.

Highagshicloud.comscore 44echoes icloud
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”

Model opinion: suspicious (target: icloud), confidence 53%. An opinion, not a finding.

Highalvexcapitalnetwork.comscore 44· active website
page asks for credentials “Sign in to your account”login form “has_form+login words”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highamazonati.comscore 44echoes amazon
brand in the name “amazon”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: suspicious (target: amazon), confidence 51%. An opinion, not a finding.

Highamazone.spacescore 44echoes amazon· no DNS
brand in the name “amazon”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: suspicious (target: Amazon), confidence 72%. An opinion, not a finding.

Highamazonia-du-fleuve.sitescore 44echoes amazon· not probed yet
brand in the name “amazon”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: suspicious, confidence 51%. An opinion, not a finding.

Highapiapi-whatsapp.comscore 44echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”

Model opinion: suspicious (target: whatsapp), confidence 65%. An opinion, not a finding.

Highapp-wellsfargo.comscore 44echoes wellsfargo
brand in the name “wellsfargo”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”

Model opinion: suspicious (target: wellsfargo), confidence 74%. An opinion, not a finding.

Highappweb-whatsapp.comscore 44echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”

Model opinion: suspicious (target: whatsapp), confidence 60%. An opinion, not a finding.

Highatikunorthernyouthvanguard.comscore 44echoes vanguard
brand in the name “vanguard”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: suspicious (target: Vanguard), confidence 60%. An opinion, not a finding.

Highbackstageforspotify.comscore 44echoes spotify
brand in the name “spotify”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”

Model opinion: suspicious (target: spotify), confidence 59%. An opinion, not a finding.

Highbest-roblox-casinos.comscore 44echoes roblox
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Tucows Domains Inc.”

Model opinion: suspicious (target: Roblox), confidence 60%. An opinion, not a finding.

Highbestbest-whatsapp.comscore 44echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”

Model opinion: suspicious (target: whatsapp), confidence 60%. An opinion, not a finding.

Highbestbuyerguide.sitescore 44echoes bestbuy· robots.txt denied
brand in the name “bestbuy”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”

Model opinion: looks like abuse, confidence 40%. An opinion, not a finding.

Highbinancepaid.comscore 44echoes binance
brand in the name “binance”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: suspicious (target: binance), confidence 73%. An opinion, not a finding.

Highbk-whatsapp.comscore 44echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”

Model opinion: suspicious (target: whatsapp), confidence 59%. An opinion, not a finding.

Highbycezelle.comscore 44echoes zelle
brand in the name “zelle”brand name on a rarely-seen nameserver “combell.eu”brand name at a retail registrar “Combell NV”

Model opinion: suspicious (target: zelle), confidence 63%. An opinion, not a finding.

Highcapitalonelcom.comscore 44echoes capitalone
brand in the name “capitalone”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: suspicious (target: capitalone), confidence 40%. An opinion, not a finding.

Highcapitalonew.comscore 44echoes capitalone
brand in the name “capitalone”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: suspicious (target: capitalone), confidence 41%. An opinion, not a finding.

Highcash-ape.funscore 44echoes cashapp· active website
one-letter brand typo “cashape≈cashapp”TLD with a high abuse rate “fun”brand name at a retail registrar “Name.com, Inc.”

Model opinion: looks like abuse, confidence 53%. An opinion, not a finding.

Highcdn2-vdy.sitescore 44· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”form submits over plain HTTP “http://www.cdn2-vdy.site/”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highcentercenter-whatsapp.comscore 44echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”

Model opinion: suspicious (target: whatsapp), confidence 58%. An opinion, not a finding.

Highchatgptonion.comscore 44echoes chatgpt
brand in the name “chatgpt”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”

Model opinion: suspicious (target: chatgpt), confidence 57%. An opinion, not a finding.

Highchatgptonion.sitescore 44echoes chatgpt· no DNS
brand in the name “chatgpt”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”

Model opinion: suspicious (target: chatgpt), confidence 40%. An opinion, not a finding.

Highcityworkday.comscore 44echoes workday
brand in the name “workday”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”

Model opinion: suspicious, confidence 53%. An opinion, not a finding.

Highclient-whatsapp.comscore 44echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”

Model opinion: suspicious (target: whatsapp), confidence 60%. An opinion, not a finding.

Highcloud-gate-247.onlinescore 44echoes icloud· robots.txt denied
one-letter brand typo “cloud≈icloud”brand plus digits “cloud-gate-247”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”

Model opinion: looks like abuse (target: icloud), confidence 50%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-09-28&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.