Flagged newborn domains, Wednesday, October 7, 2026

446 names at tier high or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highunyhooks.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “uniswap”form on a brand-styled page “has_form”
Highuseoneclick.funscore 46· active website
TLD with a high abuse rate “fun”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 66%. An opinion, not a finding.

Highvanguaid.comscore 46echoes vanguard· active website
one-letter brand typo “vanguaid≈vanguard”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 46%. An opinion, not a finding.

Highvertbetjetx-br.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highvote-tme.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 44%. An opinion, not a finding.

Highvotei-tme.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Telegram), confidence 60%. An opinion, not a finding.

Highvotes-tme.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Telegram), confidence 60%. An opinion, not a finding.

Highvoteu-tme.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious (target: Telegram), confidence 60%. An opinion, not a finding.

Highvotez-tme.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highwalmarts.sitescore 46echoes walmart· boilerplate page
brand in the name “walmart”brand name behind Cloudflare “cloudflare.com”identical page on many newborns “110 identical pages”

Model opinion: looks like abuse (target: Walmart), confidence 70%. An opinion, not a finding.

Highwarmupwizards.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 74%. An opinion, not a finding.

Highwbestclickvote.icuscore 46· redirects elsewhere
TLD with a high abuse rate “icu”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highwhatsapp-1.cyouscore 46echoes whatsapp· empty page
brand in the name “whatsapp”brand plus digits “whatsapp-1”TLD with a high abuse rate “cyou”

Model opinion: looks like abuse (target: WhatsApp), confidence 80%. An opinion, not a finding.

Highwhorueytsbjuuyg.icuscore 46· blocked the probe
TLD with a high abuse rate “icu”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Highwoordpress.onlinescore 46echoes wordpress· active website
one-letter brand typo “woordpress≈wordpress”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: WordPress), confidence 55%. An opinion, not a finding.

Highxolum.funscore 46· redirects elsewhere
TLD with a high abuse rate “fun”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 78%. An opinion, not a finding.

Highyenigirismeritking.clickscore 46· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highchatgptpluginsdirectory.comscore 45echoes chatgpt· active website
brand in the name “chatgpt”brand name and brand-styled page “chatgpt”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highlinkedinsepaisekaisekamaye.casascore 45echoes linkedin· active website
brand in the name “linkedin”brand name and brand-styled page “linkedin”

Model opinion: looks benign, confidence 78%. An opinion, not a finding.

Highrepairopsmail.comscore 45· redirects elsewhere
nameserver domain born the same day “repairopsdigital.com”brand in page title, not in the name “google”

Model opinion: looks benign, confidence 65%. An opinion, not a finding.

Highroleoutlook.comscore 45echoes outlook· active website
brand in the name “outlook”brand name and brand-styled page “outlook”

Model opinion: looks benign, confidence 86%. An opinion, not a finding.

Hightelegramg.xinscore 45echoes telegram· empty page
brand in the name “telegram”brand name and brand-styled page “telegram”
Hightwittersepaisekaisekamaye.casascore 45echoes twitter· active website
brand in the name “twitter”brand name and brand-styled page “twitter”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highus-dropbox.supportscore 45echoes dropbox· active website
brand in the name “dropbox”brand name and brand-styled page “dropbox”

Model opinion: looks like phishing (target: Dropbox), confidence 75%. An opinion, not a finding.

Highus-onedrive.supportscore 45echoes onedrive· active website
brand in the name “onedrive”brand name and brand-styled page “onedrive”

Model opinion: looks like a scam (target: Microsoft OneDrive), confidence 86%. An opinion, not a finding.

Highvt-tiktok.livescore 45echoes tiktok· active website
brand in the name “tiktok”brand name and brand-styled page “tiktok”

Model opinion: looks benign, confidence 64%. An opinion, not a finding.

High0cloud.xyzscore 44echoes icloud· parked, for sale
one-letter brand typo “0cloud≈icloud”brand plus digits “0cloud”TLD with a high abuse rate “xyz”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

High11255793google.comscore 44echoes google
brand in the name “google”brand plus digits “11255793google”brand name behind Cloudflare “cloudflare.com”
High880833robinhood.comscore 44echoes robinhood
brand in the name “robinhood”brand plus digits “880833robinhood”brand name behind Cloudflare “cloudflare.com”
Highaccesssecureinnetsghsiieuyei.workscore 44· blocked the probe
lure words (login, verify, secure…) “access,secure”very long name “28”TLD with a high abuse rate “work”brand in page title, not in the name “cloudflare”
Highaccessvault.centerscore 44· active website
lure words (login, verify, secure…) “access”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: TikTok), confidence 95%. An opinion, not a finding.

Highafter2nite.comscore 44· active website
page asks for credentials “sign in to your account”login form “has_form+login words”

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Highamazoncarhop.topscore 44echoes amazon· empty page
brand in the name “amazon”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks like abuse (target: Amazon), confidence 60%. An opinion, not a finding.

Highapexkode.comscore 44· active website
brand in page title, not in the name “booking”form on a brand-styled page “has_form”form submits over plain HTTP “http://apexkode.com/”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highbarclaysbo.xyzscore 44echoes barclays· empty page
brand in the name “barclays”TLD with a high abuse rate “xyz”brand name on a rarely-seen nameserver “webhostingbliss.com”

Model opinion: looks like abuse (target: Barclays), confidence 75%. An opinion, not a finding.

Highchatwithopenai.winscore 44echoes openai· no DNS
brand in the name “openai”TLD with a high abuse rate “win”brand name behind Cloudflare “cloudflare.com”
Highcommandwebportal.comscore 44· redirects elsewhere
lure words (login, verify, secure…) “portal”brand in page title, not in the name “paypal”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highdelaidobro2896gmail.comscore 44echoes gmail
brand in the name “gmail”brand plus digits “delaidobro2896gmail”brand name on a rarely-seen nameserver “getspace.us”
Highg9gmail.comscore 44echoes gmail
brand in the name “gmail”brand plus digits “g9gmail”brand name on a rarely-seen nameserver “messagingengine.com”
Highgoogle-copyright.topscore 44echoes google· no DNS
brand in the name “google”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highgooglecare.icuscore 44echoes google· server error
brand in the name “google”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highgooglesniper22014.comscore 44echoes google
brand in the name “google”brand plus digits “googlesniper22014”brand name behind Cloudflare “cloudflare.com”
Highintalingo.appscore 44· active website
page asks for credentials “Sign in to your account”login form “has_form+login words”

Model opinion: looks benign, confidence 87%. An opinion, not a finding.

Highjagannathpuricabs.infoscore 44· active website
page asks for credentials “Login to your account”login form “has_form+login words”

Model opinion: looks benign, confidence 94%. An opinion, not a finding.

Highkakao789.comscore 44echoes kakao
brand in the name “kakao”brand plus digits “kakao789”brand name behind Cloudflare “cloudflare.com”
Highkbrowndata.onlinescore 44· active website
page asks for credentials “Sign in to your account”login form “has_form+login words”

Model opinion: looks benign, confidence 77%. An opinion, not a finding.

Highla-crosse-spray-foam.comscore 44· active website
many hyphens “3”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highmelbsportscience.appscore 44· active website
page asks for credentials “Sign in to your account”login form “has_form+login words”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highnetflixkr10memequiz.comscore 44echoes netflix
brand in the name “netflix”brand plus digits “netflixkr10memequiz”brand name on a rarely-seen nameserver “awsdns-21.com”
Highofficelivesupport.comscore 44· active website
lure words (login, verify, secure…) “support”brand in page title, not in the name “outlook”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-07&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.