Flagged newborn domains, Saturday, October 3, 2026

765 names at tier high or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highmetrics-binance.comscore 44echoes binance
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highmicrosoft-datacenter.orgscore 44echoes microsoft· placeholder page
brand in the name “microsoft”brand name on a rarely-seen nameserver “thcservers.com”brand name at a retail registrar “NameCrane LLC”

Model opinion: suspicious (target: Microsoft), confidence 72%. An opinion, not a finding.

Highmizuhotp.vipscore 44echoes mizuho· no web server
brand in the name “mizuho”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highmobile-azino.xyzscore 44echoes tmobile· not probed yet
one-letter brand typo “mobile≈tmobile”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highmobile-offers.xyzscore 44echoes tmobile· not probed yet
one-letter brand typo “mobile≈tmobile”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highmobile-tyres.xyzscore 44echoes tmobile· not probed yet
one-letter brand typo “mobile≈tmobile”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highmohanned-amazon.comscore 44echoes amazon
brand in the name “amazon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “DomainRegistry.com LLC”
Highmoon-finance.xyzscore 44echoes binance· not probed yet
one-letter brand typo “finance≈binance”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highmotions-binance.comscore 44echoes binance
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highmy-cloud-node.funscore 44echoes icloud· active website
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “fun”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highmyactivity-icloud.comscore 44echoes icloud
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
Highnetflix-espacio.comscore 44echoes netflix
brand in the name “netflix”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highnewvistarecruitingmail.comscore 44echoes gmail
brand in the name “gmail”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highno-reply-suport-bybit.comscore 44echoes bybit
brand in the name “bybit”many hyphens “3”brand name at a retail registrar “Global Domain Group LLC”
Highnode-cloud.xyzscore 44echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highonchain-binance.comscore 44echoes binance
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highoutlookforward.comscore 44echoes outlook
brand in the name “outlook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
Highpaypalfeetools.comscore 44echoes paypal
brand in the name “paypal”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highphoenix-cloud.xyzscore 44echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highplatonistlabsgmail.comscore 44echoes gmail
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highreg-mail.comscore 44echoes gmail
brand in the name “gmail”brand name at a retail registrar “Gname 478 Inc”brand name at a watch-list registrar “Gname 478 Inc”
Highrevolutslotscasinos.comscore 44echoes revolut
brand in the name “revolut”brand name at a retail registrar “DEVEXPANSE LTD d/b/a Regery.com”brand name at a watch-list registrar “DEVEXPANSE LTD d/b/a Regery.com”
Highrkktcgmail.comscore 44echoes gmail
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highroblox-holdings.comscore 44echoes roblox
brand in the name “roblox”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highrocky-cloud.xyzscore 44echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highrounds-binance.comscore 44echoes binance
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highsabaicloud.netscore 44echoes icloud
brand in the name “icloud”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highsalesforce-en.comscore 44echoes salesforce
brand in the name “salesforce”brand name on a rarely-seen nameserver “monsterdns.net”brand name at a retail registrar “Key-Systems GmbH”
Highsamburuwholesalersgmail.comscore 44echoes gmail
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highseven-figur-ecreator-s.comscore 44· redirects elsewhere
many hyphens “3”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highshare-files-onedrive.comscore 44echoes onedrive
brand in the name “onedrive”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Ultahost, Inc.”
Highsialipay.comscore 44echoes alipay
brand in the name “alipay”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Highsintuit.comscore 44echoes intuit
brand in the name “intuit”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highskyvoxyworldsgofficial.asiascore 44· blocked the probe
lure words (login, verify, secure…) “official”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highslackagentplaybook.comscore 44echoes slack
brand in the name “slack”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highsmartpocketmobile.comscore 44echoes tmobile· active website
brand in the name “tmobile”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highstaraccess.onlinescore 44· active website
lure words (login, verify, secure…) “access”brand in page title, not in the name “booking”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highstarlings.workscore 44echoes starling· server error
one-letter brand typo “starlings≈starling”TLD with a high abuse rate “work”brand name at a retail registrar “Gandi SAS”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highswiftconnectgh.appscore 44· active website
page asks for credentials “Sign in to your account”login form “has_form+login words”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Hightamazon.onlinescore 44echoes amazon· active website
brand in the name “amazon”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: looks like abuse (target: Amazon), confidence 60%. An opinion, not a finding.

Hightelegrab.xyzscore 44echoes telegram· not probed yet
one-letter brand typo “telegrab≈telegram”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Hightelegramcasinonl.comscore 44echoes telegram· server error
brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “URL Solutions, Inc.”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Hightelegramdownloadvideos.comscore 44echoes telegram
brand in the name “telegram”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Hightelegramexp.comscore 44echoes telegram
brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Tucows Domains Inc.”
Hightelegramso.comscore 44echoes telegram
brand in the name “telegram”brand name on a rarely-seen nameserver “trustname.com”brand name at a retail registrar “Fewmoretaps OU d/b/a Trustname.com”
Hightelegramtc.comscore 44echoes telegram
brand in the name “telegram”brand name on a rarely-seen nameserver “trustname.com”brand name at a retail registrar “Fewmoretaps OU d/b/a Trustname.com”
Hightest-outlook-web-app.comscore 44echoes outlook
brand in the name “outlook”many hyphens “3”brand name at a retail registrar “Tucows Domains Inc.”
Highthesoftwareengineer.cloudscore 44· active website
page asks for credentials “Sign in to your account”login form “has_form+login words”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Hightiktok567.shopscore 44echoes tiktok· no web server
brand in the name “tiktok”brand plus digits “tiktok567”brand name behind Cloudflare “cloudflare.com”
Hightiktokadsalgeria.comscore 44echoes tiktok
brand in the name “tiktok”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Same data as JSON: /api/zone/risk?day=2026-10-03&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.