Flagged newborn domains, Wednesday, October 21, 2026

2,827 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highkaltraven-moonforge.clickscore 42echoes venmo· not probed yet
brand in the name “venmo”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NAMECHEAP”+1 more
Highkinghillscasino.techscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Highkkraken.asiascore 42echoes kraken· active website
one-letter brand typo “kkraken≈kraken”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highlesjardins-decholley.comscore 42echoes desjardins
one-letter brand typo “lesjardins≈desjardins”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highlg-cloud.ltdscore 42echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Highlibcyber.appscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 42%. An opinion, not a finding.

Highlloyd.designscore 42echoes lloyds· no DNS
one-letter brand typo “lloyd≈lloyds”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highlokalna-ofeta9xv17yj0b75v030c6d2.shopscore 42· redirects elsewhere
very long name “32”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 62%. An opinion, not a finding.

Highmalcolmxavier.comscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 68%. An opinion, not a finding.

Highmarkusstoll.cloudscore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 83%. An opinion, not a finding.

Highmercadolivre-promoo.comscore 42echoes mercadolibre
one-letter brand typo “mercadolivre≈mercadolibre”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Key-Systems GmbH”
Highmizuno-nl.comscore 42echoes mizuho
one-letter brand typo “mizuno≈mizuho”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloud Yuqu LLC”
Highmovindex.orgscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: suspicious (target: Netflix), confidence 60%. An opinion, not a finding.

Highoumy.appscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highoussamaettoukti.proscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks benign, confidence 59%. An opinion, not a finding.

Highovusu.comscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks benign, confidence 46%. An opinion, not a finding.

Highpany.storescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “google”

Model opinion: looks like a scam, confidence 62%. An opinion, not a finding.

Highpaopaodog.appscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highpenitentiaryambulancepreparing.comscore 42· redirects elsewhere
very long name “30”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 50%. An opinion, not a finding.

Highplaystationexclusivephoenixmarketcity.comscore 42echoes playstation
brand in the name “playstation”very long name “37”brand name at a retail registrar “GoDaddy.com, LLC”
Highpolaris-cloud.runscore 42echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highpower-stride.comscore 42echoes stripe
one-letter brand typo “stride≈stripe”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highrating.watchscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 68%. An opinion, not a finding.

Highrevolutionizingrevenueconsulting.orgscore 42echoes revolut· empty page
brand in the name “revolut”very long name “32”brand name at a retail registrar “Tucows Domains Inc.”
Highro-mobile.onlinescore 42echoes tmobile· not probed yet
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highsettledesk.onlinescore 42· active website
page impersonates a brand “DHL”brand in page title, not in the name “shopify”

Model opinion: looks benign, confidence 58%. An opinion, not a finding.

Highsever-cloud.techscore 42echoes icloud· active website
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
Highshadowservices.xyzscore 42· active website
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “xyz”page impersonates a brand “PayPal”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highshaoshuren.appscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 48%. An opinion, not a finding.

Highspotterminalpro.comscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highstride-catalogue.comscore 42echoes stripe· no DNS
one-letter brand typo “stride≈stripe”brand name on a rarely-seen nameserver “awsdns-06.org”brand name at a retail registrar “Amazon Registrar, Inc.”
Highstrike.qponscore 42echoes stripe· active website
one-letter brand typo “strike≈stripe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “URL Solutions, Inc.”
Hightecla.livescore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “tesla”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Hightorchpad.sitescore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “telegram”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highvictoria-finance.comscore 42echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
High32001021etsyfoaqdc285.topscore 41echoes etsy· no DNS
brand in the name “etsy”brand plus digits “32001021etsyfoaqdc285”random-looking name “H=3.84”TLD with a high abuse rate “top”+1 more
Highatgewinnerbonus.sbsscore 40· blocked the probe
lure words (login, verify, secure…) “bonus,winner”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Highdevicebay.appscore 40echoes ebay· registrar placeholder
brand in the name “ebay”identical page on many newborns “4103 identical pages”
Highricklebay.shopscore 40echoes ebay· boilerplate page
brand in the name “ebay”identical page on many newborns “1826 identical pages”
Highusaabundance.shopscore 40echoes usaa· parked, for sale
brand in the name “usaa”identical page on many newborns “4190 identical pages”
Highusamazonshopping.topscore 40echoes amazon· boilerplate page
brand in the name “amazon”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”identical page on many newborns “175 identical pages”
Mediumkupitdiplom-service.clickscore 39· active website
lure words (login, verify, secure…) “service”TLD with a high abuse rate “click”nameserver domain born the same day “newtestexample9988.click”
Medium22fun-th.comscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Medium365-circle.comscore 38· redirects elsewhere
brand in page title, not in the name “microsoft”form on a brand-styled page “has_form”
Medium460726-binance.comscore 38echoes binance
brand in the name “binance”brand plus digits “460726-binance”
Medium96.pubscore 38· redirects elsewhere
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
Medium999ofertas.shopscore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
Mediumabreuautos.comscore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
many hyphens “3”very long name “63”TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Mediumactive.gamesscore 38· active website
brand in page title, not in the name “steam”form on a brand-styled page “has_form”

Same data as JSON: /api/zone/risk?day=2026-10-21&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.