Flagged newborn domains, Wednesday, October 7, 2026

446 names at tier high or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highimcloud.cfdscore 42echoes icloud· active website
one-letter brand typo “imcloud≈icloud”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highkineko.familyscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highkrakenv.topscore 42echoes kraken· not probed yet
one-letter brand typo “krakenv≈kraken”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highkuluomi.latscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 65%. An opinion, not a finding.

Highlinkatlas.sitescore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “instagram”

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highlive-map-cloud.clickscore 42echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”
Highlucatech.onlinescore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highmetastasis.sitescore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “telegram”

Model opinion: looks like phishing (target: MetisDAO), confidence 77%. An opinion, not a finding.

Highmicrocoft-fin.clickscore 42echoes microsoft· server error
one-letter brand typo “microcoft≈microsoft”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks like abuse (target: Microsoft), confidence 77%. An opinion, not a finding.

Highmobile-jamuslot.monsterscore 42echoes tmobile· robots.txt denied
one-letter brand typo “mobile≈tmobile”TLD with a high abuse rate “monster”brand name behind Cloudflare “cloudflare.com”
Highmobile-jamuslot.questscore 42echoes tmobile· not probed yet
one-letter brand typo “mobile≈tmobile”TLD with a high abuse rate “quest”brand name behind Cloudflare “cloudflare.com”
Highmobile-marsbahis814.comscore 42echoes tmobile
one-letter brand typo “mobile≈tmobile”brand plus digits “mobile-marsbahis814”brand name behind Cloudflare “cloudflare.com”
Highmonopohood.onlinescore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “robinhood”

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Highofficie365.sitescore 42echoes office365· not probed yet
one-letter brand typo “officie365≈office365”brand plus digits “officie365”brand name behind Cloudflare “cloudflare.com”
Highoil.sitescore 42· active website
page impersonates a brand “Coinbase”brand in page title, not in the name “coinbase”

Model opinion: looks like a scam (target: United States Oil Fund), confidence 86%. An opinion, not a finding.

Highpen-rou-io-nos.comscore 42echoes ionos
brand in the name “ionos”many hyphens “3”brand name behind Cloudflare “cloudflare.com”
Highpingoodlian.shopscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highqytjc.shopscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highroblx-fast.cyouscore 42echoes roblox· not probed yet
one-letter brand typo “roblx≈roblox”TLD with a high abuse rate “cyou”brand name behind Cloudflare “cloudflare.com”
Highsentmine.comscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highshanshuiyuncloud.shopscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highsolcrm.techscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highsterling-outsource.comscore 42echoes starling· redirects elsewhere
one-letter brand typo “sterling≈starling”brand name behind Cloudflare “cloudflare.com”brand name redirects elsewhere “sterling-outsourcing.com”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Hightetherflash.infoscore 42· active website
page impersonates a brand “MetaMask”brand in page title, not in the name “binance”

Model opinion: looks like a scam, confidence 93%. An opinion, not a finding.

Hightheconjuringunspoken.wikiscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Hightuckpay.cardsscore 42· active website
page impersonates a brand “USPS”brand in page title, not in the name “apple”
Highturn-key.shopscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks benign, confidence 56%. An opinion, not a finding.

Highwiktok.xyzscore 42echoes tiktok· active website
one-letter brand typo “wiktok≈tiktok”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highxoblox.xyzscore 42echoes roblox· no DNS
one-letter brand typo “xoblox≈roblox”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”
Highhsbcprivesafety.comscore 41echoes hsbc· not probed yet
brand in the name “hsbc”random-looking name “H=3.64”brand name behind Cloudflare “cloudflare.com”
Highblacklinemedia.xyzscore 40echoes lineme· active website
brand in the name “lineme”TLD with a high abuse rate “xyz”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 99%. An opinion, not a finding.

Highdogamazon.shopscore 40echoes amazon· boilerplate page
brand in the name “amazon”identical page on many newborns “4226 identical pages”

Model opinion: looks like abuse (target: Amazon), confidence 60%. An opinion, not a finding.

Highmetamaskfoundation.orgscore 40echoes metamask· boilerplate page
brand in the name “metamask”identical page on many newborns “1507 identical pages”

Model opinion: looks benign, confidence 42%. An opinion, not a finding.

Highmicrosoftedu-future-ready-data.comscore 40echoes microsoft
brand in the name “microsoft”many hyphens “3”very long name “30”
Highonlinemelbet1.topscore 40echoes lineme· boilerplate page
brand in the name “lineme”brand plus digits “onlinemelbet1”TLD with a high abuse rate “top”identical page on many newborns “394 identical pages”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highoutlookintelligence.comscore 40echoes outlook· boilerplate page
brand in the name “outlook”identical page on many newborns “516 identical pages”

Model opinion: looks benign, confidence 47%. An opinion, not a finding.

Highsendgridr.onlinescore 40echoes sendgrid· boilerplate page
brand in the name “sendgrid”identical page on many newborns “840 identical pages”

Model opinion: looks like abuse (target: SendGrid), confidence 72%. An opinion, not a finding.

Highshopifyhelpcenter.onlinescore 40echoes shopify· registrar placeholder
brand in the name “shopify”identical page on many newborns “4509 identical pages”
Highshopifyhelpcenter.sitescore 40echoes shopify· registrar placeholder
brand in the name “shopify”identical page on many newborns “4509 identical pages”

Model opinion: looks benign, confidence 42%. An opinion, not a finding.

Highshopifystorz.shopscore 40echoes shopify· boilerplate page
brand in the name “shopify”identical page on many newborns “4226 identical pages”

Model opinion: looks like abuse (target: Shopify), confidence 72%. An opinion, not a finding.

Highstarlinkmobile.sitescore 40echoes starlink· boilerplate page
brand in the name “starlink”identical page on many newborns “93 identical pages”

Model opinion: looks like abuse (target: Starlink (SpaceX)), confidence 60%. An opinion, not a finding.

Highstripesxch.shopscore 40echoes stripe· boilerplate page
brand in the name “stripe”identical page on many newborns “4226 identical pages”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Hightiktokr.appscore 40echoes tiktok· boilerplate page
brand in the name “tiktok”identical page on many newborns “1507 identical pages”

Model opinion: looks like abuse (target: TikTok), confidence 60%. An opinion, not a finding.

Highvanguardroitriage.infoscore 40echoes vanguard· boilerplate page
brand in the name “vanguard”identical page on many newborns “840 identical pages”

Model opinion: suspicious (target: Vanguard), confidence 55%. An opinion, not a finding.

Highweddingoutlook.comscore 40echoes outlook· registrar placeholder
brand in the name “outlook”identical page on many newborns “689 identical pages”
Highxboxgames.storescore 40echoes xbox· boilerplate page
brand in the name “xbox”identical page on many newborns “4226 identical pages”

Model opinion: looks like abuse (target: Microsoft (Xbox)), confidence 60%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-07&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.