Flagged newborn domains, Wednesday, October 21, 2026

15 names at tier high or above in .site, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalcom-googlesearch-search-req-rvn-chrome-ob-utf-8.sitescore 60echoes google· active website
brand in the name “google”many hyphens “8”very long name “47”brand plus digits “com-googlesearch-search-req-rvn-chrome-o”+2 more

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highmobile-data-hub.sitescore 56echoes tmobile· active website
one-letter brand typo “mobile≈tmobile”brand name on a rarely-seen nameserver “adminvps.net”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”page pushes urgent payment “LIMITED TIME OFFER”

Model opinion: looks like a scam (target: Etisalat (e&)), confidence 80%. An opinion, not a finding.

Highcase4729183-metamask-support.sitescore 55echoes metamask· robots.txt denied
brand in the name “metamask”lure words (login, verify, secure…) “support”very long name “28”brand plus digits “case4729183-metamask-support”+1 more

Model opinion: suspicious (target: metamask), confidence 70%. An opinion, not a finding.

Highaha-mobile.sitescore 52echoes tmobile· active website
one-letter brand typo “mobile≈tmobile”brand name on a rarely-seen nameserver “rakko.zone”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highfrom-google.sitescore 51echoes google· server error
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “google”

Model opinion: suspicious (target: Google), confidence 65%. An opinion, not a finding.

Highcandlebay.sitescore 50echoes ebay· not probed yet
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: suspicious (target: ebay), confidence 42%. An opinion, not a finding.

Highcockpitau.sitescore 48echoes itau· boilerplate page
brand in the name “itau”brand name at a retail registrar “Synergy Wholesale Accreditations Pty Ltd”identical page on many newborns “273 identical pages”
Highrobox-home.sitescore 48echoes roblox· not probed yet
one-letter brand typo “robox≈roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
Hightelepump.sitescore 46· active website
free DNS provider “dnsowl.com”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highcashappoffersonline.sitescore 44echoes cashapp· placeholder page
brand in the name “cashapp”brand name on a rarely-seen nameserver “hostgi.com”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.Ş.”

Model opinion: looks like abuse (target: Cash App), confidence 77%. An opinion, not a finding.

Highccsbughunt.sitescore 44· active website
page asks for credentials “Verify your identity”login form “has_form+login words”

Model opinion: looks benign, confidence 89%. An opinion, not a finding.

Highlordshotelssomnath.sitescore 44· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”form submits over plain HTTP “http://lordshotelssomnath.site/”

Model opinion: looks benign, confidence 86%. An opinion, not a finding.

Highagenciacentral-contagirosvistoria.sitescore 42· active website
very long name “33”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 76%. An opinion, not a finding.

Highicioud-ze.sitescore 42echoes icloud· robots.txt denied
one-letter brand typo “icioud≈icloud”brand name on a rarely-seen nameserver “hostwindsdns.com”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.Ş.”
Hightorchpad.sitescore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “telegram”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-21&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.