Flagged newborn domains, Monday, November 2, 2026

7,321 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highmobile-cart.comscore 42echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highmobile-combustor.comscore 42echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name on a rarely-seen nameserver “helden.domains”brand name at a retail registrar “InterNetX GmbH”
Highmobile-massage-dingolfing.comscore 42echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highmobile-photos.comscore 42echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Arsys Internet, S.L. dba NICLINE.COM”
Highnewsomes-mobile-mechanics.comscore 42echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name on a rarely-seen nameserver “incauthorityweb.com”brand name at a retail registrar “DomainPeople, Inc.”
Highnoxflixapp.onlinescore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Highoutsidecontextsoftware.comscore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 56%. An opinion, not a finding.

Highpostcadence.appscore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “google”

Model opinion: looks benign, confidence 76%. An opinion, not a finding.

Highprewarmedmailbox.comscore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highracharia.appscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Highradicharizard.shopscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highragenticai.onlinescore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks like a scam (target: Binance), confidence 80%. An opinion, not a finding.

Highrevolu.forumscore 42echoes revolut· not probed yet
one-letter brand typo “revolu≈revolut”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highroblex.bestscore 42echoes roblox· robots.txt denied
one-letter brand typo “roblex≈roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Global Domain Group LLC”
Highroom-bookings.comscore 42echoes booking
one-letter brand typo “bookings≈booking”brand name on a rarely-seen nameserver “awsdns-29.net”brand name at a retail registrar “Amazon Registrar, Inc.”
Highrustorebot.shopscore 42· active website
page impersonates a brand “Apple ID”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.

Highstarline-express.websitescore 42echoes starling· empty page
one-letter brand typo “starline≈starling”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highstarline-group.comscore 42echoes starling
one-letter brand typo “starline≈starling”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highstarwing.proscore 42echoes starling· active website
one-letter brand typo “starwing≈starling”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks benign, confidence 86%. An opinion, not a finding.

Highsterling-ia-financement.comscore 42echoes starling
one-letter brand typo “sterling≈starling”brand name on a rarely-seen nameserver “ezydomain.com”brand name at a retail registrar “MAT BAO CORPORATION”
Hightaxman.livescore 42· active website
page impersonates a brand “HMRC”brand in page title, not in the name “hmrc”

Model opinion: suspicious (target: HMRC), confidence 72%. An opinion, not a finding.

Hightikpro.gamesscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “tiktok”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Hightrevor.rocksscore 42echoes trezor· no DNS
one-letter brand typo “trevor≈trezor”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc”
Highvideoafternoon.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Highvideoafterwork.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.

Highvideocollection.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.

Highvideoevening.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Highvideoeveryday.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.

Highvideolunchbreak.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”
Highvideomornings.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”
Highvideostopover.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”
Highvideotimeout.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”
Highvideoweekend.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”
Highvyloc.appscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “apple”
Highwalreviewers.topscore 42· active website
TLD with a high abuse rate “top”page pushes urgent payment “Claim your Reward”brand in page title, not in the name “walmart”
Highyanwai.appscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Highhttpswwwetsycomfrshopamirihair.storescore 41echoes etsy· boilerplate page
brand in the name “etsy”very long name “30”random-looking name “H=3.69”brand name at a retail registrar “Tucows Domains Inc.”+1 more
Highairevolution.onlinescore 40echoes revolut· parked, for sale
brand in the name “revolut”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”identical page on many newborns “61 identical pages”brand name redirects elsewhere “sedo.com”
Highakinsoftbolgebayi.comscore 40echoes ebay· placeholder page
brand in the name “ebay”brand name at a retail registrar “Isimtescil Bilisim A.S.”form on a brand-styled page “has_form”
Highsafestripessociety.orgscore 40echoes stripe· boilerplate page
brand in the name “stripe”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “185 identical pages”brand name redirects elsewhere “expiredwixdomain.com”
Mediumtelegram.catscore 39echoes telegram· redirects elsewhere
brand in the name “telegram”brand name on a rarely-seen nameserver “regery.net”brand name and brand-styled page “telegram”brand name redirects elsewhere “play.tg”
Medium123win4.onlinescore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Medium19slots.sitescore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Medium1x78.onlinescore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Medium369vip.spacescore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Medium369x.funscore 38· registrar placeholder
TLD with a high abuse rate “fun”brand in page title, not in the name “hostinger”identical page on many newborns “52 identical pages”
Medium5vegamovies.coursesscore 38· active website
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Medium69th.websitescore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Medium6lv.websitescore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Mediuma1detectiveagency.sitescore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Same data as JSON: /api/zone/risk?day=2026-11-02&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.