Flagged newborn domains, Wednesday, November 4, 2026

2,429 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Hightiktokmad.comscore 44echoes tiktok
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Hightinge-bay.comscore 44echoes ebay
brand in the name “ebay”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Hightraderstripe.comscore 44echoes stripe
brand in the name “stripe”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Hightrywinnerscircle.shopscore 44· redirects elsewhere
lure words (login, verify, secure…) “winner”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highunclaimedbaggageselected.shopscore 44· redirects elsewhere
lure words (login, verify, secure…) “claim”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious (target: Google), confidence 72%. An opinion, not a finding.

Highus-quickbooksintuit.comscore 44echoes intuit
brand in the name “intuit”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highusaafs.bizscore 44echoes usaa· not probed yet
brand in the name “usaa”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highuswalmart.topscore 44echoes walmart· not probed yet
brand in the name “walmart”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highvaco-portal.comscore 44· active website
lure words (login, verify, secure…) “portal”brand in page title, not in the name “microsoft”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highvanguardarchitecture.comscore 44echoes vanguard
brand in the name “vanguard”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highvanguardgaragecrew.sitescore 44echoes vanguard· placeholder page
brand in the name “vanguard”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highvanguardsalessolution.comscore 44echoes vanguard
brand in the name “vanguard”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highvanguardspecialtygroup.comscore 44echoes vanguard
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highvanguardspteam.comscore 44echoes vanguard
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highvanguardwindowcoverings.comscore 44echoes vanguard
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highvipstreamportal.spacescore 44· active website
lure words (login, verify, secure…) “portal”brand in page title, not in the name “chatgpt”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: OpenAI), confidence 93%. An opinion, not a finding.

Highwalmartss.comscore 44echoes walmart
brand in the name “walmart”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
Highwalmartutahshop.comscore 44echoes walmart
brand in the name “walmart”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloud Yuqu LLC”
Highwap-hkweb-whatsapp.comscore 44echoes whatsapp
brand in the name “whatsapp”brand name on a rarely-seen nameserver “kenpains.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
Highwechatbuddy.comscore 44echoes wechat
brand in the name “wechat”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Highwelcomecreatorontiktok.teamscore 44echoes tiktok· not probed yet
brand in the name “tiktok”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highwhatsappapi.netscore 44echoes whatsapp
brand in the name “whatsapp”brand name on a rarely-seen nameserver “iseencloud.net”brand name at a retail registrar “GoDaddy.com, LLC”
Highwin-100mill-et.onlinescore 44· redirects elsewhere
lure words (login, verify, secure…) “win”brand in page title, not in the name “amazon”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highx-finityplay.comscore 44echoes xfinity
brand in the name “xfinity”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highxcash-app.onlinescore 44echoes cashapp· no DNS
brand in the name “cashapp”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highpestcontrolvanguardnewyork.sitescore 43echoes vanguard· active website
brand in the name “vanguard”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”brand name and brand-styled page “vanguard”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

High0ffice365microsoftonline.comscore 42echoes microsoft
brand in the name “microsoft”brand plus digits “0ffice365microsoftonline”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”+1 more
High8bta7.shopscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highaccordos.sitescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highalasat.orgscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks like abuse, confidence 70%. An opinion, not a finding.

Highallianz-finance.topscore 42echoes binance· not probed yet
one-letter brand typo “finance≈binance”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highallianz-finance.xinscore 42echoes binance· not probed yet
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
Highapp-icloudhelp.clickscore 42echoes icloud· empty page
brand in the name “icloud”TLD with a high abuse rate “click”brand name on a rarely-seen nameserver “clouddns-j1k.pro”brand name at a retail registrar “Sav.com, LLC”+1 more

Model opinion: suspicious (target: Apple), confidence 72%. An opinion, not a finding.

Highapp-icloudhelps.clickscore 42echoes icloud· empty page
brand in the name “icloud”TLD with a high abuse rate “click”brand name on a rarely-seen nameserver “clouddns-j1k.pro”brand name at a retail registrar “Sav.com, LLC”+1 more

Model opinion: suspicious (target: Apple), confidence 72%. An opinion, not a finding.

Highasset-finance-center.comscore 42echoes binance
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Global Domain Group LLC”
Highayudaparanovatos.sitescore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highbandalimoviehub.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks like abuse, confidence 75%. An opinion, not a finding.

Highbeardyk.storescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “taobao”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highbeggar.sitescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highbluegum.digitalscore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highbookking.storescore 42echoes booking· robots.txt denied
one-letter brand typo “bookking≈booking”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highbrown-finance.orgscore 42echoes binance· robots.txt denied
one-letter brand typo “finance≈binance”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highbtr-whatssapp.comscore 42echoes whatsapp
one-letter brand typo “whatssapp≈whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
Highcaspiancyber.comscore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highcenter-shopifiy.comscore 42echoes shopify
one-letter brand typo “shopifiy≈shopify”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Tucows Domains Inc.”
Highchatglpt.comscore 42echoes chatgpt
one-letter brand typo “chatglpt≈chatgpt”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highcitrine-finance.comscore 42echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highck-whatszapp.comscore 42echoes whatsapp· robots.txt denied
one-letter brand typo “whatszapp≈whatsapp”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highcloud-skynet.netscore 42echoes icloud
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Highcosco-shipyard.comscore 42echoes costco
one-letter brand typo “cosco≈costco”brand name at a retail registrar “Gname 029 Inc”brand name at a watch-list registrar “Gname 029 Inc”

Same data as JSON: /api/zone/risk?day=2026-11-04&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.