Flagged newborn domains, Thursday, October 1, 2026

10,743 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:10-02 10-01 09-30 09-28 09-27 09-26 09-25 09-22 09-21 09-20

Highconstruxioneetrenovationdp-gmail.comscore 48echoes gmail

brand in the name “gmail”very long name “32”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”

Highdiscoversharepoint.techscore 48echoes sharepoint· boilerplate page

brand in the name “sharepoint”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “2918 identical pages”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highdisneybroadwaymerchandiseshop.comscore 48echoes disney

brand in the name “disney”very long name “29”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Highdisneyonbroadwaymerchandiseshop.comscore 48echoes disney

brand in the name “disney”very long name “31”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Highdisneywestendmerchandiseshop.comscore 48echoes disney

brand in the name “disney”very long name “28”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Highelite-finance.onlinescore 48echoes binance· blocked the probe

one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Highetsy-comshopaurecreationn.storescore 48echoes etsy· boilerplate page

brand in the name “etsy”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “2918 identical pages”

Model opinion: looks like abuse (target: Etsy), confidence 68%. An opinion, not a finding.

Highfidelityos.sitescore 48echoes fidelity· boilerplate page

brand in the name “fidelity”brand name at a retail registrar “Synergy Wholesale Accreditations Pty Ltd”identical page on many newborns “241 identical pages”

Model opinion: looks benign, confidence 55%. An opinion, not a finding.

Highgooglesi.cloudscore 48echoes google· boilerplate page

brand in the name “google”brand name at a retail registrar “GoDaddy”identical page on many newborns “2918 identical pages”

Model opinion: looks like abuse (target: Google), confidence 60%. An opinion, not a finding.

Highgooglesi.infoscore 48echoes google· boilerplate page

brand in the name “google”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “2918 identical pages”

Model opinion: looks like abuse (target: Google), confidence 62%. An opinion, not a finding.

Highgtatogel-mobile.comscore 48echoes tmobile

one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Highhalk-finance.comscore 48echoes binance· empty page

one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highhttpsindiaartrugetsy.storescore 48echoes etsy· boilerplate page

brand in the name “etsy”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “2918 identical pages”

Model opinion: looks like abuse (target: Etsy), confidence 58%. An opinion, not a finding.

Highidcloud-findcc.helpscore 48echoes icloud· boilerplate page

one-letter brand typo “idcloud≈icloud”brand name on a rarely-seen nameserver “solovino-ramdom.co”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”

Model opinion: looks like phishing (target: Apple (iCloud / Find My)), confidence 70%. An opinion, not a finding.

Highintuitivetreasures.storescore 48echoes intuit· boilerplate page

brand in the name “intuit”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “1587 identical pages”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highmerchpayment.appscore 48· active website

lure words (login, verify, secure…) “payment”page impersonates a brand “MetaMask”brand in page title, not in the name “robinhood”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highmicro-cloud.spacescore 48echoes icloud· not probed yet

one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Highmobile-coloksgp.comscore 48echoes tmobile

Highmobile-kipashoki.comscore 48echoes tmobile

Highmpocash-mobile.comscore 48echoes tmobile· no DNS

Highmyrewardnatwestrade.comscore 48echoes natwest

brand in the name “natwest”lure words (login, verify, secure…) “reward”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”

Highoutrook.proscore 48echoes outlook· no DNS

one-letter brand typo “outrook≈outlook”brand name on a rarely-seen nameserver “zomro.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Highpaypad.onlinescore 48echoes paypal· not probed yet

one-letter brand typo “paypad≈paypal”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Highperiwinkle-cloud.comscore 48echoes icloud

one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Highplaystationpilot.storescore 48echoes playstation· boilerplate page

brand in the name “playstation”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “2918 identical pages”

Model opinion: looks like abuse (target: Sony PlayStation), confidence 55%. An opinion, not a finding.

Highsecondostipendioconetsy.comscore 48echoes etsy· boilerplate page

brand in the name “etsy”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “358 identical pages”

Model opinion: looks like a scam, confidence 55%. An opinion, not a finding.

Highshop-awazon.worldscore 48echoes amazon· not probed yet

one-letter brand typo “awazon≈amazon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Highsmbcrad-nub.ripscore 48echoes smbc· boilerplate page

brand in the name “smbc”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “2918 identical pages”

Model opinion: looks like abuse (target: SMBC (Sumitomo Mitsui Card)), confidence 65%. An opinion, not a finding.

Highsmbcrad-out.ripscore 48echoes smbc· boilerplate page

brand in the name “smbc”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “2918 identical pages”

Model opinion: looks like abuse (target: SMBC (Sumitomo Mitsui Banking Corporation / SMBC Card)), confidence 60%. An opinion, not a finding.

Hightidewell-cloud.comscore 48echoes icloud

one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”

Hightw-mobile-recharge.comscore 48echoes tmobile· not probed yet

one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Highunlimitedintuition.comscore 48echoes intuit

brand in the name “intuit”lure words (login, verify, secure…) “limited”brand name at a retail registrar “GoDaddy.com, LLC”

Highusa-american-english-consulting.comscore 48echoes usaa

brand in the name “usaa”many hyphens “3”very long name “31”brand name at a retail registrar “Wix.com Ltd.”

Highuykusaati.xyzscore 48echoes usaa· registrar placeholder

brand in the name “usaa”TLD with a high abuse rate “xyz”brand name at a retail registrar “Nics Telekomunikasyon A.S.”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 87%. An opinion, not a finding.

Highxn--depilaoprofissional-0vb7f.sitescore 48· registrar placeholder

punycode name “depilaçãoprofissional scripts=LATIN”brand in page title, not in the name “hostinger”identical page on many newborns “107 identical pages”

Model opinion: looks benign, confidence 81%. An opinion, not a finding.

Highxn--soluesdigitais-jjb8t.storescore 48· registrar placeholder

punycode name “soluçõesdigitais scripts=LATIN”brand in page title, not in the name “hostinger”identical page on many newborns “107 identical pages”

Model opinion: looks benign, confidence 71%. An opinion, not a finding.

Highcoinbase.catscore 47echoes coinbase· active website

brand in the name “coinbase”page impersonates a brand “Coinbase”brand name and brand-styled page “coinbase”

Model opinion: looks benign (target: coinbase), confidence 62%. An opinion, not a finding.

High018686.xyzscore 46· redirects elsewhere

TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 69%. An opinion, not a finding.

High01943.clickscore 46· redirects elsewhere

TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 56%. An opinion, not a finding.

High036betmobile.comscore 46echoes tmobile

brand in the name “tmobile”brand plus digits “036betmobile”brand name at a retail registrar “NameMart Pte. Ltd.”

High0543.clickscore 46· redirects elsewhere

TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 61%. An opinion, not a finding.

High079betmobile.comscore 46echoes tmobile

brand in the name “tmobile”brand plus digits “079betmobile”brand name at a retail registrar “NameMart Pte. Ltd.”

High096betmobile.comscore 46echoes tmobile

brand in the name “tmobile”brand plus digits “096betmobile”brand name at a retail registrar “NameMart Pte. Ltd.”

High1010betmobile.comscore 46echoes tmobile

brand in the name “tmobile”brand plus digits “1010betmobile”brand name at a retail registrar “NameMart Pte. Ltd.”

High1097betmobile.comscore 46echoes tmobile

brand in the name “tmobile”brand plus digits “1097betmobile”brand name at a retail registrar “NameMart Pte. Ltd.”

High1223betmobile.comscore 46echoes tmobile· no DNS

brand in the name “tmobile”brand plus digits “1223betmobile”brand name at a retail registrar “NameMart Pte. Ltd.”

High1226betmobile.comscore 46echoes tmobile

brand in the name “tmobile”brand plus digits “1226betmobile”brand name at a retail registrar “NameMart Pte. Ltd.”

High123betmobile.comscore 46echoes tmobile

brand in the name “tmobile”brand plus digits “123betmobile”brand name at a retail registrar “NameMart Pte. Ltd.”

High1279betmobile.comscore 46echoes tmobile

brand in the name “tmobile”brand plus digits “1279betmobile”brand name at a retail registrar “NameMart Pte. Ltd.”

High127betmobile.comscore 46echoes tmobile

brand in the name “tmobile”brand plus digits “127betmobile”brand name at a retail registrar “NameMart Pte. Ltd.”

Same data as JSON: /api/zone/risk?day=2026-10-01&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.