Flagged newborn domains, Monday, October 26, 2026

1,655 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highsubscriptionsforless.comscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks like a scam, confidence 70%. An opinion, not a finding.

Highsynstra.appscore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highta-mobile.netscore 42echoes tmobile· no DNS
one-letter brand typo “tamobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Hightabsies.appscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Hightacebook.comscore 42echoes facebook
one-letter brand typo “tacebook≈facebook”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Hightaibao-work.helpscore 42echoes taobao· blocked the probe
one-letter brand typo “taibao≈taobao”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Highthe-cloud.namescore 42echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Hightittok.sitescore 42echoes tiktok· no DNS
one-letter brand typo “tittok≈tiktok”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Hightrustwallelt.comscore 42echoes trustwallet
one-letter brand typo “trustwallelt≈trustwallet”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Realtime Register B.V.”
Hightunguyen-cloud.comscore 42echoes icloud
one-letter brand typo “cloud≈icloud”brand name on a rarely-seen nameserver “awsdns-37.com”brand name at a retail registrar “Amazon Registrar, Inc.”
Highunderoutfitofficials.shopscore 42· active website
lure words (login, verify, secure…) “official”page impersonates a brand “PayPal”page pushes urgent payment “risk-free”

Model opinion: looks like phishing (target: Underoutfit), confidence 80%. An opinion, not a finding.

Highusxrdata.storescore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highvideovibe.orgscore 42· active website
page impersonates a brand “NETFLIX”brand in page title, not in the name “netflix”

Model opinion: suspicious (target: Netflix), confidence 72%. An opinion, not a finding.

Highwhatsspp.infoscore 42echoes whatsapp· boilerplate page
one-letter brand typo “whatsspp≈whatsapp”brand name at a retail registrar “GNAME.COM PTE. LTD.”brand name at a watch-list registrar “GNAME.COM PTE. LTD.”

Model opinion: looks like abuse (target: WhatsApp), confidence 80%. An opinion, not a finding.

Highyanglyjayhaleyericksononmicrosoft.comscore 42echoes microsoft
brand in the name “microsoft”very long name “33”brand name at a retail registrar “GoDaddy.com, LLC”
Highyouyun.appscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “disney”

Model opinion: looks benign, confidence 77%. An opinion, not a finding.

Highdisneyland.shopscore 40echoes disney· boilerplate page
brand in the name “disney”identical page on many newborns “3168 identical pages”

Model opinion: looks like abuse (target: Disney), confidence 60%. An opinion, not a finding.

Highorthodoxboxing.storescore 40echoes xbox· active website
brand in the name “xbox”brand name at a retail registrar “Tucows Domains Inc.”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highsteelandstripes.storescore 40echoes stripe· placeholder page
brand in the name “stripe”brand name at a retail registrar “InterNetX GmbH”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Medium1upgradeperkillwiki.wikiscore 38· active website
brand in page title, not in the name “roblox”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Medium2d-collab.landscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Medium365agent.cloudscore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Medium3rdrowrevival.comscore 38· active website
brand in page title, not in the name “booking”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Medium416e6472656173.linkscore 38· redirects elsewhere
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Medium42vp.blogscore 38· active website
brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 68%. An opinion, not a finding.

Medium4dc-collab.landscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Medium6-slon6at.onlinescore 38· active website
brand in page title, not in the name “kraken”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Medium6388.cardsscore 38· placeholder page
brand in page title, not in the name “ebay”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Medium8bitdouyy.shopscore 38· active website
brand in page title, not in the name “xbox”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: 8BitDo), confidence 85%. An opinion, not a finding.

Medium8bsuitdo.shopscore 38· active website
brand in page title, not in the name “xbox”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: 8BitDo), confidence 86%. An opinion, not a finding.

Mediumabovethebay.netscore 38echoes ebay
brand in the name “ebay”brand name at a retail registrar “Wix.com Ltd.”
Mediumacadexa.studyscore 38· active website
brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Mediumaccwebdesjardins.comscore 38echoes desjardins
brand in the name “desjardins”brand name at a retail registrar “Global Domain Group LLC”
Mediumacxsolucoes.digitalscore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Mediumagent4fashion.comscore 38· redirects elsewhere
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Mediumagenteconectinternet.onlinescore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Mediumaicloud.qponscore 38echoes icloud· boilerplate page
brand in the name “icloud”brand name at a retail registrar “Dominet (HK) Limited”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Mediumaifinityroblox.comscore 38echoes roblox
brand in the name “roblox”brand name at a retail registrar “Squarespace Domains II LLC”
Mediumairbnbnightmare.comscore 38echoes airbnb
brand in the name “airbnb”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumaiseocrew.comscore 38· active website
brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Mediumalgos.wikiscore 38· active website
brand in page title, not in the name “instagram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Mediumaliexpresskurye.comscore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Mediumalmansoori.appscore 38· redirects elsewhere
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Mediumaltitude5fpv.comscore 38· active website
brand in page title, not in the name “chase”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Mediumamazonaann.comscore 38echoes amazon· no web server
brand in the name “amazon”brand name at a retail registrar “Imminentdomains.net LLC”
Mediumamazonaverse.comscore 38echoes amazon
brand in the name “amazon”brand name at a retail registrar “Name.com, Inc.”
Mediumamazonbulkliquidation.comscore 38echoes amazon
brand in the name “amazon”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumamazonbulkliquidations.comscore 38echoes amazon
brand in the name “amazon”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumamazoneer.comscore 38echoes amazon
brand in the name “amazon”brand name at a retail registrar “DropCatch.com 1165 LLC”
Mediumamazonliquidationinventory.comscore 38echoes amazon
brand in the name “amazon”brand name at a retail registrar “GoDaddy.com, LLC”

Same data as JSON: /api/zone/risk?day=2026-10-26&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.