Flagged newborn domains, Friday, October 30, 2026

762 names at tier high or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highig-instagram.xyzscore 46echoes instagram· no web server
brand in the name “instagram”TLD with a high abuse rate “xyz”brand name at a retail registrar “GoDaddy.com, LLC”
Highineytvfon.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Google), confidence 97%. An opinion, not a finding.

Highinstiko.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “instagram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highintesasanpaolofiliale66512.comscore 46echoes intesa
brand in the name “intesa”brand plus digits “intesasanpaolofiliale66512”brand name at a retail registrar “Xin Net Technology Corporation”
Highjackbay.funscore 46· active website
TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 41%. An opinion, not a finding.

Highjirani.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highmagnificent-smart-finance-path.comscore 46echoes binance
one-letter brand typo “finance≈binance”many hyphens “3”very long name “30”brand name at a retail registrar “Wix.com Ltd.”
Highmahfuzfrelacher.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 58%. An opinion, not a finding.

Highmehedihasan.workscore 46· active website
TLD with a high abuse rate “work”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Highmicrosoft365s.comscore 46echoes microsoft
brand in the name “microsoft”brand plus digits “microsoft365s”brand name at a retail registrar “GoDaddy.com, LLC”
Highmobile-mend.proscore 46echoes tmobile· boilerplate page
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “OVH SAS”identical page on many newborns “32 identical pages”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Highmobileredirector.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highmonozukuri.workscore 46· active website
TLD with a high abuse rate “work”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 86%. An opinion, not a finding.

Highmoustache.icuscore 46· redirects elsewhere
TLD with a high abuse rate “icu”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highmynaerc.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “uniswap”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 58%. An opinion, not a finding.

Highnavixajyze.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highnerja.workscore 46· redirects elsewhere
TLD with a high abuse rate “work”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highnesinecasino586.camscore 46· blocked the probe
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highnewdawnmassagecentergmail.comscore 46echoes gmail· redirects elsewhere
brand in the name “gmail”brand name at a retail registrar “GoDaddy.com, LLC”brand name redirects elsewhere “newdawnmassagecenter.com”

Model opinion: suspicious (target: Gmail), confidence 72%. An opinion, not a finding.

Highnvidix.comscore 46echoes nvidia· boilerplate page
one-letter brand typo “nvidix≈nvidia”brand name at a retail registrar “Realtime Register B.V.”identical page on many newborns “64 identical pages”

Model opinion: looks like abuse (target: NVIDIA), confidence 58%. An opinion, not a finding.

Highoutlook366.comscore 46echoes outlook
brand in the name “outlook”brand plus digits “outlook366”brand name at a retail registrar “Amazon Registrar, Inc.”
Highpaypay-jp.ripscore 46echoes paypal· boilerplate page
one-letter brand typo “paypay≈paypal”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “1941 identical pages”

Model opinion: looks like abuse (target: PayPay), confidence 70%. An opinion, not a finding.

Highpaypay-ne.ripscore 46echoes paypal· boilerplate page
one-letter brand typo “paypay≈paypal”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “1941 identical pages”

Model opinion: looks like abuse (target: PayPay), confidence 62%. An opinion, not a finding.

Highpl-zakupy9999812141.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 70%. An opinion, not a finding.

Highpuppydogmails.comscore 46echoes gmail· suspended
brand in the name “gmail”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 63%. An opinion, not a finding.

Highqi-paczkomatinpost6492.cfdscore 46· redirects elsewhere
TLD with a high abuse rate “cfd”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highroastpons.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highrobotarena.winscore 46· redirects elsewhere
TLD with a high abuse rate “win”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 47%. An opinion, not a finding.

Highrudyanextaplamp.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highsakora.funscore 46· active website
TLD with a high abuse rate “fun”brand in page title, not in the name “roblox”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highseo4google.comscore 46echoes google· no DNS
brand in the name “google”brand plus digits “seo4google”brand name at a retail registrar “OVH sas”
Highspectrascan.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “spectrum”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 54%. An opinion, not a finding.

Highstratarh.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highsyaahidates.lolscore 46· active website
TLD with a high abuse rate “lol”brand in page title, not in the name “ledger”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 83%. An opinion, not a finding.

Hightelegram24.vipscore 46echoes telegram· no web server
brand in the name “telegram”brand plus digits “telegram24”brand name at a retail registrar “CommuniGal Communication Ltd.”
Hightorqcrew.funscore 46· active website
TLD with a high abuse rate “fun”brand in page title, not in the name “uniswap”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 68%. An opinion, not a finding.

Hightrickzzkey.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “roblox”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highuser14-stripe.comscore 46echoes stripe
brand in the name “stripe”brand plus digits “user14-stripe”brand name at a retail registrar “Tucows Domains Inc.”
Highuser31-stripe.comscore 46echoes stripe
brand in the name “stripe”brand plus digits “user31-stripe”brand name at a retail registrar “Tucows Domains Inc.”
Highuser92-stripe.comscore 46echoes stripe
brand in the name “stripe”brand plus digits “user92-stripe”brand name at a retail registrar “Tucows Domains Inc.”
Highveloxcatch.downloadscore 46· active website
TLD with a high abuse rate “download”brand in page title, not in the name “facebook”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highvhhemjzacrwhknwd.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highvipolewe.momscore 46· redirects elsewhere
TLD with a high abuse rate “mom”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highvirtualstream.sbsscore 46· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”
Highvoxprime63onmicrosoft.blogscore 46echoes microsoft· robots.txt denied
brand in the name “microsoft”brand plus digits “voxprime63onmicrosoft”brand name at a retail registrar “Automattic Inc.”
Highwhatsapphack.xyzscore 46echoes whatsapp· no DNS
brand in the name “whatsapp”TLD with a high abuse rate “xyz”brand name at a retail registrar “TuringSign Inc. d/b/a Cosmotown”
Highxindatalan2ne.cfdscore 46· redirects elsewhere
TLD with a high abuse rate “cfd”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 40%. An opinion, not a finding.

Highxn--elt.xyzscore 46· active website
punycode name “峰 scripts=CJK”TLD with a high abuse rate “xyz”brand in page title, not in the name “telegram”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highyour02.lolscore 46· redirects elsewhere
TLD with a high abuse rate “lol”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Highyour03.lolscore 46· redirects elsewhere
TLD with a high abuse rate “lol”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-30&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.