Flagged newborn domains, Wednesday, October 28, 2026

2,183 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highmain-postback.comscore 42echoes postbank
one-letter brand typo “postback≈postbank”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highmain-postback.sitescore 42echoes postbank· empty page
one-letter brand typo “postback≈postbank”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highmetamaisk.comscore 42echoes metamask
one-letter brand typo “metamaisk≈metamask”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highmobile-fastpay.comscore 42echoes tmobile· blocked the probe
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Name.com, Inc.”
Highmoony-cloud.comscore 42echoes icloud
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
Highmotoresydiferencialesdemexico.comscore 42· active website
very long name “29”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highn7777google1.comscore 42echoes google
brand in the name “google”brand plus digits “n7777google1”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Highn7777google2.comscore 42echoes google· no DNS
brand in the name “google”brand plus digits “n7777google2”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Highn7777google3.comscore 42echoes google
brand in the name “google”brand plus digits “n7777google3”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Highn7777google4.comscore 42echoes google
brand in the name “google”brand plus digits “n7777google4”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Highn7777google5.comscore 42echoes google
brand in the name “google”brand plus digits “n7777google5”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Highnexitally.sitescore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highnotflix.latscore 42echoes netflix· no DNS
one-letter brand typo “notflix≈netflix”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
Highoficial-lcloud.comscore 42echoes icloud
one-letter brand typo “lcloud≈icloud”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highopeai.topscore 42echoes openai· empty page
one-letter brand typo “opeai≈openai”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks like abuse (target: OpenAI), confidence 72%. An opinion, not a finding.

Highopensi.charityscore 42echoes openai· no web server
one-letter brand typo “opensi≈openai”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highopensi.dogscore 42echoes openai· no web server
one-letter brand typo “opensi≈openai”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highopensi.gayscore 42echoes openai· no web server
one-letter brand typo “opensi≈openai”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highperpai.tradescore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highsage-cloud-report.comscore 42echoes icloud
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highshanuka.netscore 42· active website
page impersonates a brand “MICROSOFT 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highskullcapai.appscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “tiktok”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highstoretiki.onlinescore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks like abuse, confidence 55%. An opinion, not a finding.

Highstuckinthemiddleteachingresources.blogscore 42· active website
very long name “33”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 70%. An opinion, not a finding.

Highsujing.inkscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Hightackie-finance.comscore 42echoes binance· no DNS
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “URL Solutions, Inc.”
Hightadamun-cloud.orgscore 42echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”brand name on a rarely-seen nameserver “verpex.com”brand name at a retail registrar “Netregistry Wholesale Pty Ltd”
Hightipello.appscore 42· active website
page impersonates a brand “MetaMask”brand in page title, not in the name “metamask”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Hightraness-cloud.comscore 42echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Hightreecoin.worldscore 42· active website
page impersonates a brand “METAMASK”brand in page title, not in the name “robinhood”

Model opinion: looks like a scam, confidence 74%. An opinion, not a finding.

Hightrinumics.comscore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Hightwinoasis.comscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: suspicious (target: Binance), confidence 72%. An opinion, not a finding.

Highvfxacademy.infoscore 42· active website
page impersonates a brand “NETFLIX”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highviewverse.spacescore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “amazon”

Model opinion: looks like abuse, confidence 86%. An opinion, not a finding.

Highwhopify.sitescore 42echoes shopify· no DNS
one-letter brand typo “whopify≈shopify”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highxero-cloud.partyscore 42echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highzakee-cloud.techscore 42echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highzcashier.shopscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “apple”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highzh-mobile-lanjingapp.comscore 42echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Gname 216 Inc”brand name at a watch-list registrar “Gname 216 Inc”
Highzonadigitalpro.storescore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “paypal”

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Highbetsy-piercings.comscore 40echoes etsy· active website
brand in the name “etsy”brand name at a retail registrar “Name.com, Inc.”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highcompanieshouseidverification.comscore 40· active website
lure words (login, verify, secure…) “verification”very long name “28”page asks for credentials “Verify your identity”

Model opinion: looks like phishing (target: Companies House), confidence 60%. An opinion, not a finding.

Highkhulug.comscore 40echoes hulu· active website
brand in the name “hulu”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highorbitaudio.storescore 40echoes itau· boilerplate page
brand in the name “itau”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “41 identical pages”brand name redirects elsewhere “expiredwixdomain.com”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highrevolutionarypony.shopscore 40echoes revolut· boilerplate page
brand in the name “revolut”identical page on many newborns “2279 identical pages”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highubicacion-icloudfind.xyzscore 40echoes icloud· boilerplate page
brand in the name “icloud”TLD with a high abuse rate “xyz”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.Ş.”identical page on many newborns “47 identical pages”

Model opinion: looks like abuse (target: Apple), confidence 82%. An opinion, not a finding.

Medium32win.loansscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Medium4d-collab.landscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Collab.Land), confidence 80%. An opinion, not a finding.

Medium77street.kitchenscore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Medium7panel.orgscore 38· active website
brand in page title, not in the name “instagram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-28&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.