Flagged newborn domains, Tuesday, October 13, 2026

2,467 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highreferral-code.orgscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highrobsheppard.videoscore 42· active website
page impersonates a brand “Bank of America”brand in page title, not in the name “nintendo”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highscottjones.designscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highsignaleye.websitescore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “telegram”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highsogvest.comscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks benign, confidence 65%. An opinion, not a finding.

Highspolify.comscore 42echoes spotify
one-letter brand typo “spolify≈spotify”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highspore-cloud.comscore 42echoes icloud
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highsterling-bowen.comscore 42echoes starling
one-letter brand typo “sterling≈starling”brand name at a retail registrar “Gname 148 Inc”brand name at a watch-list registrar “Gname 148 Inc”
Highsterling-garagedoor.comscore 42echoes starling
one-letter brand typo “sterling≈starling”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highstrive-taxtranscript.comscore 42echoes stripe
one-letter brand typo “strive≈stripe”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsuhail-mobile.comscore 42echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highsuperintelligent-finance.comscore 42echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highswinstonwolkoffarchivetwitter.comscore 42echoes twitter
brand in the name “twitter”very long name “29”brand name at a retail registrar “GoDaddy.com, LLC”
Hight-deal-mobile.comscore 42echoes tmobile· no DNS
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Hightidalcn.orgscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “chatgpt”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Hightop-rated-mobile-fax-apps.comscore 42echoes tmobile
one-letter brand typo “mobile≈tmobile”many hyphens “4”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Hightrexor.sitescore 42echoes trezor· robots.txt denied
one-letter brand typo “trexor≈trezor”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Hightrexor.spacescore 42echoes trezor· robots.txt denied
one-letter brand typo “trexor≈trezor”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Hightryhinge.sitescore 42· active website
page impersonates a brand “MetaMask”brand in page title, not in the name “robinhood”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highutilica.appscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highvanguarrd.onlinescore 42echoes vanguard· server error
one-letter brand typo “vanguarrd≈vanguard”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highveriqon.techscore 42echoes verizon· active website
one-letter brand typo “veriqon≈verizon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “OpusDNS GmbH”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highverizeon.comscore 42echoes verizon
one-letter brand typo “verizeon≈verizon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “AppCroNix Infotech Private Limited, d/b/”
Highviando.cloudscore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highviondo.cloudscore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highvornuqzelix.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highxn--cinbase-90a.infoscore 42echoes coinbase· active website
punycode name “cöinbase scripts=LATIN”brand in the name “coinbase”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”

Model opinion: suspicious (target: Coinbase), confidence 72%. An opinion, not a finding.

Highxn--cinbase-90a.onlinescore 42echoes coinbase· robots.txt denied
punycode name “cöinbase scripts=LATIN”brand in the name “coinbase”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highxn--penai-zta.comscore 42echoes openai
punycode name “ópenai scripts=LATIN”brand in the name “openai”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highzachwheat.bioscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “facebook”
Highzhuiyun.clubscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “chatgpt”
Highai-powered-stock-recommendations.topscore 40· active website
many hyphens “3”very long name “32”TLD with a high abuse rate “top”page impersonates a brand “Coinbase”
Highaicloudinfra.comscore 40echoes icloud· boilerplate page
brand in the name “icloud”brand name at a retail registrar “DropCatch.com 593 LLC”identical page on many newborns “177 identical pages”brand name redirects elsewhere “dropcatch.com”
Highdefiguardalerts.xyzscore 40· other
lure words (login, verify, secure…) “alert,alerts”TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Highmadammozelles.comscore 40echoes zelle· active website
brand in the name “zelle”brand name at a retail registrar “Squarespace Domains II LLC”form on a brand-styled page “has_form”
Highsequinsandstripes.comscore 40echoes stripe· boilerplate page
brand in the name “stripe”brand name at a retail registrar “DropCatch.com 1208 LLC”identical page on many newborns “177 identical pages”brand name redirects elsewhere “dropcatch.com”
Hightmaccountingservices.netscore 40· active website
lure words (login, verify, secure…) “account,service,services”page impersonates a brand “IRS”
Highusataxandaccountingservices.sitescore 40· active website
lure words (login, verify, secure…) “account,service,services”page impersonates a brand “IRS”
Mediumledger-info.orgscore 39echoes ledger· active website
ambiguous brand word “ledger”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more
Medium12yearsandout.blogscore 38· active website
brand in page title, not in the name “telegram”form on a brand-styled page “has_form”
Mediumabhaysingh.devscore 38· active website
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumacslanka.comscore 38· active website
brand in page title, not in the name “booking”form on a brand-styled page “has_form”
Mediumadobeaisi.comscore 38echoes adobe
brand in the name “adobe”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumadto.chatscore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
Mediumaerqumista.proscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumaetiktok.comscore 38echoes tiktok
brand in the name “tiktok”brand name at a retail registrar “Xin Net Technology Corporation”
Mediumagent-kourier.devscore 38· redirects elsewhere
brand in page title, not in the name “slack”form on a brand-styled page “has_form”
Mediumagentfuel.appscore 38· active website
brand in page title, not in the name “openai”form on a brand-styled page “has_form”
Mediumagentkourier.devscore 38· active website
brand in page title, not in the name “slack”form on a brand-styled page “has_form”
Mediumaioicloud.comscore 38echoes icloud
brand in the name “icloud”brand name at a retail registrar “GoDaddy.com, LLC”

Same data as JSON: /api/zone/risk?day=2026-10-13&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.