Flagged newborn domains, Thursday, November 5, 2026

10,864 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highrenownedtechrevolution.sbsscore 42echoes revolut· not probed yet
brand in the name “revolut”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Highruby-finance.comscore 42echoes binance
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highsamecheap.comscore 42echoes namecheap
one-letter brand typo “samecheap≈namecheap”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highsessionary-cloud.helpscore 42echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highsharpstore.livescore 42· active website
page impersonates a brand “Apple ID”brand in page title, not in the name “apple”

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Highsmsflash.orgscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “google”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highsumly.devscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “google”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Hightamphap.comscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highteam-go-cloud.comscore 42echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highteb-family-cloud.comscore 42echoes icloud
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Hightechforgesolutions.onlinescore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “whatsapp”

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highteiegram-co.comscore 42echoes telegram
one-letter brand typo “teiegram≈telegram”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Hightexas-mobile-spray-tan.comscore 42echoes tmobile
one-letter brand typo “mobile≈tmobile”many hyphens “3”brand name at a retail registrar “Wix.com Ltd.”
Hightresor-noir.comscore 42echoes trezor
one-letter brand typo “tresor≈trezor”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “OVH sas”
Highturbomax.fitscore 42echoes turbotax· no DNS
one-letter brand typo “turbomax≈turbotax”brand name at a retail registrar “Porkbun”brand name at a watch-list registrar “Porkbun”
Hightv-revolution-2-0.comscore 42echoes revolut
brand in the name “revolut”many hyphens “3”brand plus digits “tv-revolution-2-0”brand name on a rarely-seen nameserver “dnsnuts.com”+1 more
Hightwinkle-cloud.comscore 42echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highurban-finance.comscore 42echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “Gname 206 Inc”brand name at a watch-list registrar “Gname 206 Inc”
Highvanquard.helpscore 42echoes vanguard· no DNS
one-letter brand typo “vanquard≈vanguard”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
Highvcloud.surfscore 42echoes icloud· no DNS
one-letter brand typo “vcloud≈icloud”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highveltrisys.techscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: suspicious, confidence 57%. An opinion, not a finding.

Highvideobreather.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 82%. An opinion, not a finding.

Highvideodowntime.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 82%. An opinion, not a finding.

Highvideointerval.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.

Highvideomidday.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.

Highvideonightcap.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 82%. An opinion, not a finding.

Highvideorecess.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Highvideosunrise.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”
Highvideoteatime.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”
Highvideotwilight.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”
Highvideoweekday.onlinescore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “telegram”
Highview-finance-workdesk.comscore 42echoes binance· empty page
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Global Domain Group LLC”
Highwhatsapo.latscore 42echoes whatsapp· not probed yet
one-letter brand typo “whatsapo≈whatsapp”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highxn--ggle-vqaa.comscore 42echoes google
punycode name “gôôgle scripts=LATIN”brand in the name “google”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highaccountupdate.clickscore 40· blocked the probe
lure words (login, verify, secure…) “account,update”TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Highauaramexv.topscore 40echoes aramex· boilerplate page
brand in the name “aramex”TLD with a high abuse rate “top”brand name at a retail registrar “NameMart Pte. Ltd.”identical page on many newborns “20 identical pages”
Highauaramexx.topscore 40echoes aramex· boilerplate page
brand in the name “aramex”TLD with a high abuse rate “top”brand name at a retail registrar “NameMart Pte. Ltd.”identical page on many newborns “20 identical pages”
Highbigmservicesllc.clickscore 40· active website
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “click”brand in page title, not in the name “namecheap”
Highcloud-umanistico-pietrafitta.comscore 40echoes icloud
one-letter brand typo “cloud≈icloud”very long name “28”brand name at a retail registrar “Register SPA”
Highlongelectricalservices.clickscore 40· other
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Highpietrafitta-humanistic-cloud.comscore 40echoes icloud
one-letter brand typo “cloud≈icloud”very long name “28”brand name at a retail registrar “Register SPA”
Hightcgmailclub.comscore 40echoes gmail· placeholder page
brand in the name “gmail”brand name at a retail registrar “Tucows Domains Inc.”form on a brand-styled page “has_form”
Hightticloud.spacescore 40echoes icloud· registrar placeholder
brand in the name “icloud”identical page on many newborns “4142 identical pages”
Highvegastarsnodepositbonus.onlinescore 40· active website
lure words (login, verify, secure…) “bonus”page pushes urgent payment “risk-free”brand in page title, not in the name “telegram”
Mediumwechat.istscore 39echoes wechat· active website
brand in the name “wechat”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”brand name and brand-styled page “wechat”
Medium181labs.buildscore 38· active website
brand in page title, not in the name “booking”form on a brand-styled page “has_form”
Medium417games.topscore 38· registrar placeholder
TLD with a high abuse rate “top”brand in page title, not in the name “hostinger”identical page on many newborns “134 identical pages”
Medium4weekbootcamp.comscore 38· active website
brand in page title, not in the name “zoom”form on a brand-styled page “has_form”
Medium605homesearch.comscore 38· active website
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediuma1pick.comscore 38· active website
brand in page title, not in the name “chatgpt”form on a brand-styled page “has_form”

Same data as JSON: /api/zone/risk?day=2026-11-05&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.