Flagged newborn domains, Wednesday, October 21, 2026

16,563 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highrowmerge.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highroyalmicrosoft.xyzscore 46echoes microsoft· not probed yet
brand in the name “microsoft”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highroyalwordpress.xyzscore 46echoes wordpress· not probed yet
brand in the name “wordpress”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highsharewordpress.xyzscore 46echoes wordpress· not probed yet
brand in the name “wordpress”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highshibamicrosoft.xyzscore 46echoes microsoft· not probed yet
brand in the name “microsoft”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highshibawordpress.xyzscore 46echoes wordpress· not probed yet
brand in the name “wordpress”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highshiftmicrosoft.xyzscore 46echoes microsoft· not probed yet
brand in the name “microsoft”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highshiftwordpress.xyzscore 46echoes wordpress· not probed yet
brand in the name “wordpress”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highskimmseduc.cyouscore 46· active website
TLD with a high abuse rate “cyou”brand in page title, not in the name “booking”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 96%. An opinion, not a finding.

Highslowmail.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 76%. An opinion, not a finding.

Highsmincabbac.lolscore 46· active website
TLD with a high abuse rate “lol”brand in page title, not in the name “booking”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 99%. An opinion, not a finding.

Highspinfrenzy.restscore 46· redirects elsewhere
TLD with a high abuse rate “rest”brand in page title, not in the name “amazon”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 45%. An opinion, not a finding.

Highsprouttown.funscore 46· placeholder page
TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: suspicious (target: Robinhood), confidence 72%. An opinion, not a finding.

Highstorie.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 56%. An opinion, not a finding.

Highstuccisogo.skinscore 46· active website
TLD with a high abuse rate “skin”brand in page title, not in the name “booking”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 100%. An opinion, not a finding.

Hightelegramm.bondscore 46echoes telegram· excluded
brand in the name “telegram”TLD with a high abuse rate “bond”brand name at a retail registrar “NicNames, Inc.”

Model opinion: suspicious (target: Telegram), confidence 72%. An opinion, not a finding.

Hightelepump.sitescore 46· active website
free DNS provider “dnsowl.com”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Hightiktokis18.comscore 46echoes tiktok
brand in the name “tiktok”brand plus digits “tiktokis18”brand name at a retail registrar “Realtime Register B.V.”
Hightommysparkleauto.buzzscore 46· active website
TLD with a high abuse rate “buzz”brand in page title, not in the name “booking”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 94%. An opinion, not a finding.

Hightrabuducda.lolscore 46· active website
TLD with a high abuse rate “lol”brand in page title, not in the name “booking”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 98%. An opinion, not a finding.

Hightrysellfirst.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 77%. An opinion, not a finding.

Highusa-abundance.xyzscore 46echoes usaa· excluded
brand in the name “usaa”TLD with a high abuse rate “xyz”brand name at a retail registrar “GoDaddy.com, LLC”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highusaabundance.xyzscore 46echoes usaa· excluded
brand in the name “usaa”TLD with a high abuse rate “xyz”brand name at a retail registrar “GoDaddy.com, LLC”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highusamazonshopping.helpscore 46echoes amazon· boilerplate page
brand in the name “amazon”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”+1 more

Model opinion: looks like abuse (target: Amazon), confidence 80%. An opinion, not a finding.

Highusamazonshopping.vipscore 46echoes amazon· boilerplate page
brand in the name “amazon”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”+1 more

Model opinion: looks like abuse (target: Amazon), confidence 80%. An opinion, not a finding.

Highusememepay.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “steam”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highuseproofrail.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highvehiclesvanguardindia.spacescore 46echoes vanguard· active website
brand in the name “vanguard”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highvero-todentaminen.sbsscore 46· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highversus-arena.funscore 46· active website
TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 51%. An opinion, not a finding.

Highvinte-493234.icuscore 46· redirects elsewhere
TLD with a high abuse rate “icu”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 54%. An opinion, not a finding.

Highwheeliespin.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 70%. An opinion, not a finding.

Highxfowya.icuscore 46· redirects elsewhere
TLD with a high abuse rate “icu”brand in page title, not in the name “quickbooks”form on a brand-styled page “has_form”
Highxn--v52bi4i43h.xyzscore 46· active website
punycode name “모산중 scripts=HANGUL”TLD with a high abuse rate “xyz”brand in page title, not in the name “google”

Model opinion: suspicious (target: Google), confidence 72%. An opinion, not a finding.

Highzasada42.makeupscore 46· redirects elsewhere
TLD with a high abuse rate “makeup”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 50%. An opinion, not a finding.

Highzos.lolscore 46· redirects elsewhere
TLD with a high abuse rate “lol”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 76%. An opinion, not a finding.

Highaccessclients2leads.orgscore 44· redirects elsewhere
lure words (login, verify, secure…) “access”brand in page title, not in the name “booking”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 58%. An opinion, not a finding.

Highaccessgetflowmeeting.orgscore 44· redirects elsewhere
lure words (login, verify, secure…) “access”brand in page title, not in the name “booking”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 64%. An opinion, not a finding.

Highaccessleadrunner.orgscore 44· redirects elsewhere
lure words (login, verify, secure…) “access”brand in page title, not in the name “booking”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 58%. An opinion, not a finding.

Highaccweb-mouv-desjardins.comscore 44echoes desjardins
brand in the name “desjardins”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highadobeacrobat-reader.comscore 44echoes adobe
brand in the name “adobe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gransy, s.r.o.”
Highadspendtracker.orgscore 44· parked, for sale
lure words (login, verify, secure…) “track”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 87%. An opinion, not a finding.

Highamazonagencypartner.comscore 44echoes amazon
brand in the name “amazon”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highamazoncentral-seller.comscore 44echoes amazon
brand in the name “amazon”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highamazonfind.onlinescore 44echoes amazon· not probed yet
brand in the name “amazon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highamazoniaon.comscore 44echoes amazon
brand in the name “amazon”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highamazoniaon.onlinescore 44echoes amazon· robots.txt denied
brand in the name “amazon”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highamazoniaon.orgscore 44echoes amazon· robots.txt denied
brand in the name “amazon”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highamazoniasale.netscore 44echoes amazon
brand in the name “amazon”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highanmaicloud.netscore 44echoes icloud
brand in the name “icloud”brand name at a retail registrar “Gname 490 Inc”brand name at a watch-list registrar “Gname 490 Inc”

Same data as JSON: /api/zone/risk?day=2026-10-21&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.