Flagged newborn domains, Wednesday, November 4, 2026

2,429 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highspotifyplus.xyzscore 46echoes spotify· no web server
brand in the name “spotify”TLD with a high abuse rate “xyz”brand name at a retail registrar “GoDaddy.com, LLC”
Highstrafe-muss-sein.winscore 46· redirects elsewhere
TLD with a high abuse rate “win”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highstreamvantage.cyouscore 46· active website
TLD with a high abuse rate “cyou”brand in page title, not in the name “disney”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Disney+), confidence 95%. An opinion, not a finding.

Hightaobao126.comscore 46echoes taobao
brand in the name “taobao”brand plus digits “taobao126”brand name at a retail registrar “Dominet (HK) Limited”
Highteplapostel.clickscore 46echoes laposte· boilerplate page
brand in the name “laposte”TLD with a high abuse rate “click”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highthebaypros.comscore 46echoes ebay· active website
brand in the name “ebay”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 65%. An opinion, not a finding.

Hightiktok678.comscore 46echoes tiktok
brand in the name “tiktok”brand plus digits “tiktok678”brand name at a retail registrar “GoDaddy.com, LLC”
Hightiktok789.comscore 46echoes tiktok
brand in the name “tiktok”brand plus digits “tiktok789”brand name at a retail registrar “GoDaddy.com, LLC”
Hightiktokkindonesia.xyzscore 46echoes tiktok· no web server
brand in the name “tiktok”TLD with a high abuse rate “xyz”brand name at a retail registrar “GoDaddy.com, LLC”
Hightjgolosa.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 40%. An opinion, not a finding.

Hightjgolosovanie.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Hightjgolosovanie.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 40%. An opinion, not a finding.

Hightjkonkurs.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Hightktowa.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 50%. An opinion, not a finding.

Hightrykobo.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 64%. An opinion, not a finding.

Highunit02.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 41%. An opinion, not a finding.

Highuspsconnect.netscore 46echoes usps· redirects elsewhere
brand in the name “usps”brand name at a retail registrar “Wix.com Ltd.”brand name redirects elsewhere “expiredwixdomain.com”

Model opinion: looks like abuse (target: USPS), confidence 75%. An opinion, not a finding.

Highuzbgolosovanie.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious (target: Google), confidence 72%. An opinion, not a finding.

Highuzkonkurs.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highv19864984.cfdscore 46· redirects elsewhere
TLD with a high abuse rate “cfd”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highv20864984.cfdscore 46· redirects elsewhere
TLD with a high abuse rate “cfd”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highv49864984.cfdscore 46· redirects elsewhere
TLD with a high abuse rate “cfd”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highv50064984.cfdscore 46· redirects elsewhere
TLD with a high abuse rate “cfd”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highveyrum.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highvote-pools.icuscore 46· blocked the probe
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highvote-sup.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highvote-zero.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious (target: Google), confidence 72%. An opinion, not a finding.

Highvotedance.sbsscore 46· parked, for sale
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Highxn--5pq965hzyqpna.topscore 46· server error
punycode name “钱程似锦 scripts=CJK”TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”

Model opinion: suspicious, confidence 41%. An opinion, not a finding.

Highxn--vorz32d.xyzscore 46· blocked the probe
punycode name “渐变 scripts=CJK”TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Highzaclonyzavesysk.sbsscore 46· active website
TLD with a high abuse rate “sbs”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 89%. An opinion, not a finding.

Highzh9-whatsapp.comscore 46echoes whatsapp
brand in the name “whatsapp”brand plus digits “zh9-whatsapp”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
Highmcinsurancefirst.comscore 45· blocked the probe
nameserver domain born the same day “mcneelyinsdirect.com”brand in page title, not in the name “cloudflare”
Highmcneelycoverage.comscore 45· blocked the probe
nameserver domain born the same day “mcneelyinsdirect.com”brand in page title, not in the name “cloudflare”
Highmcneelyinsplus.comscore 45· blocked the probe
nameserver domain born the same day “mcneelyinsurancepartners.com”brand in page title, not in the name “cloudflare”
Highmcneelyinsurancecentral.comscore 45· blocked the probe
nameserver domain born the same day “mcneelyinsurancepartners.com”brand in page title, not in the name “cloudflare”
Highmcneelyinsurancegroup.comscore 45· blocked the probe
nameserver domain born the same day “mcneelyinsdirect.com”brand in page title, not in the name “cloudflare”
High100barclayst.comscore 44echoes barclays
brand in the name “barclays”brand plus digits “100barclayst”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”+1 more
High10barclayst.comscore 44echoes barclays
brand in the name “barclays”brand plus digits “10barclayst”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”+1 more
High1stopja.livescore 44· active website
brand in page title, not in the name “booking”form on a brand-styled page “has_form”form submits over plain HTTP “https://www.1stopja.live/”

Model opinion: looks benign, confidence 84%. An opinion, not a finding.

Highadasupport-okta.comscore 44echoes okta
ambiguous brand word “okta”lure words (login, verify, secure…) “support”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
Highadobeedoc.comscore 44echoes adobe
brand in the name “adobe”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highadsrw-google.comscore 44echoes google
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highaeroinstagram.comscore 44echoes instagram
brand in the name “instagram”brand name on a rarely-seen nameserver “middlehost.com”brand name at a retail registrar “Gransy, s.r.o.”
Highamazon-artistry.comscore 44echoes amazon
brand in the name “amazon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highamazoniasolution.comscore 44echoes amazon
brand in the name “amazon”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highamazonproducts.shopscore 44echoes amazon· no DNS
brand in the name “amazon”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highanthropickaxe.comscore 44echoes anthropic· empty page
brand in the name “anthropic”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highapp-hkweb-whatsapp.comscore 44echoes whatsapp
brand in the name “whatsapp”brand name on a rarely-seen nameserver “kenpains.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
Highassistentedotiktok.comscore 44echoes tiktok
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”

Same data as JSON: /api/zone/risk?day=2026-11-04&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.