Flagged newborn domains, Monday, November 2, 2026

590 names at tier high or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Hightiktok-recvd.proscore 44echoes tiktok· not probed yet
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Eranet International Limited”
Hightrezor-app-solutions.comscore 44echoes trezor
brand in the name “trezor”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
Highvanguard-international.orgscore 44echoes vanguard· active website
brand in the name “vanguard”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Highvanguardsentinelconsulting.comscore 44echoes vanguard
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highweb-conn-whatsapp.comscore 44echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Zhengzhou Century Connect Electronic Tec”
Highweb-go-whatsapp.comscore 44echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Zhengzhou Century Connect Electronic Tec”
Highweb-msg-whatsapp.comscore 44echoes whatsapp· no DNS
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Zhengzhou Century Connect Electronic Tec”
Highwebhkpath-whatsapp.comscore 44echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
Highwebshopee.sitescore 44echoes shopee· no DNS
brand in the name “shopee”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highwellsfargo-ca.onlinescore 44echoes wellsfargo· no DNS
brand in the name “wellsfargo”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highwhatsappgrowthengine.comscore 44echoes whatsapp
brand in the name “whatsapp”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highwhatsappwangyeban.comscore 44echoes whatsapp
brand in the name “whatsapp”brand name on a rarely-seen nameserver “kenpains.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
Highwhatsappwebcn.comscore 44echoes whatsapp
brand in the name “whatsapp”brand name on a rarely-seen nameserver “kenpains.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
Highxfinityvmsi.comscore 44echoes xfinity
brand in the name “xfinity”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highyanjicloud.comscore 44echoes icloud
brand in the name “icloud”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Highredstripebelgradedoo.orgscore 43echoes stripe· active website
brand in the name “stripe”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”brand name and brand-styled page “stripe”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highaltabacohondurasbloghistoryarticlesritualinstagram.blogscore 42echoes instagram· robots.txt denied
brand in the name “instagram”very long name “50”brand name at a retail registrar “Automattic Inc.”
Highaxolotl.babyscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highbookwing.proscore 42echoes booking· active website
one-letter brand typo “bookwing≈booking”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: suspicious (target: Booking.com), confidence 55%. An opinion, not a finding.

Highcalisync.cloudscore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “icloud”

Model opinion: looks benign, confidence 66%. An opinion, not a finding.

Highciatgpt.comscore 42echoes chatgpt
one-letter brand typo “ciatgpt≈chatgpt”brand name on a rarely-seen nameserver “hostico.ro”brand name at a retail registrar “Key-Systems GmbH”
Highclashmianfei.blogscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 52%. An opinion, not a finding.

Highclipafternoon.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.

Highclipafterwork.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.

Highclipcollection.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.

Highclipevening.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.

Highclipeveryday.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Highcliplunchbreak.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.

Highclipmornings.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 82%. An opinion, not a finding.

Highclipstopover.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.

Highcliptimeout.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 82%. An opinion, not a finding.

Highclipweekend.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Highcloud-hosting.onescore 42echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Vautron Rechenzentrum AG”
Highcloud-metrics.netscore 42echoes icloud
one-letter brand typo “cloud≈icloud”brand name on a rarely-seen nameserver “aeza-dns.net”brand name at a retail registrar “OnlineNIC, Inc.”
Highdarkstory-mobile.comscore 42echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
Highdidierreyes.onlinescore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Highdocsign.blogscore 42echoes docusign· not probed yet
one-letter brand typo “docsign≈docusign”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highdost-co.comscore 42echoes costco
one-letter brand typo “dostco≈costco”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
Highfinance-dowiedz.comscore 42echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highfuitly.comscore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highgdtrading.storescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “wordpress”

Model opinion: suspicious (target: PayPal), confidence 72%. An opinion, not a finding.

Highjabeen-bookings.onlinescore 42echoes booking· active website
one-letter brand typo “bookings≈booking”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”

Model opinion: looks benign, confidence 46%. An opinion, not a finding.

Highjifengyun-jc.latscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highjohnh.linkscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “tiktok”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Highkaizenai.systemsscore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 71%. An opinion, not a finding.

Highkargom.onlinescore 42· active website
page impersonates a brand “DHL”brand in page title, not in the name “fedex”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highkumimo.devscore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 77%. An opinion, not a finding.

Highluckyagent.appscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Highmetamaskcoporationinversions.comscore 42echoes metamask
brand in the name “metamask”very long name “28”brand name at a retail registrar “IONOS SE”
Highmitce.worldscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-11-02&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.