Flagged newborn domains, Friday, October 2, 2026

3,926 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

High0z-icloud.topscore 55echoes icloud· no web server
brand in the name “icloud”brand plus digits “0z-icloud”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more

Model opinion: looks like abuse (target: Apple (iCloud)), confidence 70%. An opinion, not a finding.

High10xbox.xyzscore 55echoes xbox· boilerplate page
brand in the name “xbox”brand plus digits “10xbox”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

High1xbet-mobile.clickscore 55echoes tmobile· no DNS
brand in the name “tmobile”brand plus digits “1xbet-mobile”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

High1xbet-mobile.cyouscore 55echoes tmobile· not probed yet
brand in the name “tmobile”brand plus digits “1xbet-mobile”TLD with a high abuse rate “cyou”brand name at a retail registrar “Spaceship, Inc.”+1 more

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

High1z-icloud.topscore 55echoes icloud· no web server
brand in the name “icloud”brand plus digits “1z-icloud”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more

Model opinion: looks like abuse (target: Apple (iCloud)), confidence 70%. An opinion, not a finding.

High2finity.chatscore 55echoes xfinity· registrar placeholder
one-letter brand typo “2finity≈xfinity”brand plus digits “2finity”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

High2finity.cloudscore 55echoes xfinity· registrar placeholder
one-letter brand typo “2finity≈xfinity”brand plus digits “2finity”brand name at a retail registrar “NAMECHEAP”brand name at a watch-list registrar “NAMECHEAP”+1 more

Model opinion: looks benign, confidence 66%. An opinion, not a finding.

High2finity.onlinescore 55echoes xfinity· registrar placeholder
one-letter brand typo “2finity≈xfinity”brand plus digits “2finity”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more

Model opinion: looks benign, confidence 65%. An opinion, not a finding.

High2finity.orgscore 55echoes xfinity· registrar placeholder
one-letter brand typo “2finity≈xfinity”brand plus digits “2finity”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

High2finity.proscore 55echoes xfinity· registrar placeholder
one-letter brand typo “2finity≈xfinity”brand plus digits “2finity”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

High2finity.sitescore 55echoes xfinity· registrar placeholder
one-letter brand typo “2finity≈xfinity”brand plus digits “2finity”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more

Model opinion: looks benign, confidence 65%. An opinion, not a finding.

High2finity.workscore 55echoes xfinity· registrar placeholder
one-letter brand typo “2finity≈xfinity”brand plus digits “2finity”TLD with a high abuse rate “work”brand name at a retail registrar “NameCheap, Inc.”+2 more

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

High2x-icloud.topscore 55echoes icloud· no web server
brand in the name “icloud”brand plus digits “2x-icloud”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more

Model opinion: suspicious (target: icloud), confidence 40%. An opinion, not a finding.

High3c-icloud.topscore 55echoes icloud· no web server
brand in the name “icloud”brand plus digits “3c-icloud”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more

Model opinion: looks like abuse (target: Apple (iCloud)), confidence 75%. An opinion, not a finding.

High41786-portal-google.comscore 55echoes google
brand in the name “google”lure words (login, verify, secure…) “portal”brand plus digits “41786-portal-google”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: suspicious (target: google), confidence 76%. An opinion, not a finding.

High41786google.comscore 55echoes google
brand in the name “google”brand plus digits “41786google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more

Model opinion: suspicious (target: google), confidence 70%. An opinion, not a finding.

High4v-icloud.topscore 55echoes icloud· no web server
brand in the name “icloud”brand plus digits “4v-icloud”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
High5b-icloud.topscore 55echoes icloud· no web server
brand in the name “icloud”brand plus digits “5b-icloud”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
High6n-icloud.topscore 55echoes icloud· no web server
brand in the name “icloud”brand plus digits “6n-icloud”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
High7m-icloud.topscore 55echoes icloud· no web server
brand in the name “icloud”brand plus digits “7m-icloud”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
High7mobilechatsupport.xyzscore 55echoes tmobile· empty page
brand spelled with digits “7mobilechatsupport→tmobile”lure words (login, verify, secure…) “support”brand plus digits “7mobilechatsupport”TLD with a high abuse rate “xyz”+2 more

Model opinion: looks like abuse (target: T-Mobile), confidence 70%. An opinion, not a finding.

High8z-icloud.topscore 55echoes icloud· no web server
brand in the name “icloud”brand plus digits “8z-icloud”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
High973810-robinhood.comscore 55echoes robinhood
brand in the name “robinhood”brand plus digits “973810-robinhood”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
High9827841coinbase.comscore 55echoes coinbase
brand in the name “coinbase”brand plus digits “9827841coinbase”random-looking name “H=3.77”brand name behind Cloudflare “cloudflare.com”+2 more
High9z-icloud.topscore 55echoes icloud· no web server
brand in the name “icloud”brand plus digits “9z-icloud”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Higha2a-ledger.orgscore 55echoes ledger· redirects elsewhere
brand in the name “ledger”brand plus digits “a2a-ledger”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”+2 more

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highaccess-coinbase.comscore 55echoes coinbase
brand in the name “coinbase”lure words (login, verify, secure…) “access”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Highaccount-gmail-workspace.comscore 55echoes gmail
brand in the name “gmail”lure words (login, verify, secure…) “account”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highadobe-doc.topscore 55echoes adobe· boilerplate page
brand in the name “adobe”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo,LLC”+2 more

Model opinion: looks like abuse (target: Adobe), confidence 80%. An opinion, not a finding.

Highadobedocument.proscore 55echoes adobe· blocked the probe
brand in the name “adobe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”+1 more
Highalert-americanexpress.comscore 55echoes americanexpress
brand in the name “americanexpress”lure words (login, verify, secure…) “alert”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highamazon-account-verify.netscore 55echoes amazon
brand in the name “amazon”lure words (login, verify, secure…) “account,verify”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
Highamazon-supportvn.comscore 55echoes amazon
brand in the name “amazon”lure words (login, verify, secure…) “support”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Highamazones.topscore 55echoes amazon· blocked the probe
brand in the name “amazon”TLD with a high abuse rate “top”brand name at a retail registrar “Dynadot LLC”brand name at a watch-list registrar “Dynadot LLC”+1 more
Highapple-op1.topscore 55echoes apple· no web server
brand in the name “apple”brand plus digits “apple-op1”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Highapple-op2.topscore 55echoes apple· no web server
brand in the name “apple”brand plus digits “apple-op2”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Highapple-op3.topscore 55echoes apple· no web server
brand in the name “apple”brand plus digits “apple-op3”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Highapple-op4.topscore 55echoes apple· no web server
brand in the name “apple”brand plus digits “apple-op4”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Highapple-op5.topscore 55echoes apple· no web server
brand in the name “apple”brand plus digits “apple-op5”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Highapple-op6.topscore 55echoes apple· no web server
brand in the name “apple”brand plus digits “apple-op6”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Highapple-op7.topscore 55echoes apple· no web server
brand in the name “apple”brand plus digits “apple-op7”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Highapple-op8.topscore 55echoes apple· no web server
brand in the name “apple”brand plus digits “apple-op8”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Highapple-pay.casinoscore 55echoes apple· boilerplate page
brand in the name “apple”lure words (login, verify, secure…) “pay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+2 more

Model opinion: looks like abuse (target: Apple), confidence 70%. An opinion, not a finding.

Highapple-store-account.onlinescore 55echoes apple· no DNS
brand in the name “apple”lure words (login, verify, secure…) “account”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highazino-mobile-official.orgscore 55echoes tmobile· not probed yet
one-letter brand typo “mobile≈tmobile”lure words (login, verify, secure…) “official”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Internet Domain Service BS Corp”
Highbankofamerica-loginverify.comscore 55echoes bankofamerica
brand in the name “bankofamerica”lure words (login, verify, secure…) “login,verify”brand name on a rarely-seen nameserver “bb-online.biz”brand name at a retail registrar “Nombre Ltd”
Highbankofamericalogin2verify.comscore 55echoes bankofamerica
brand in the name “bankofamerica”lure words (login, verify, secure…) “login,verify”brand plus digits “bankofamericalogin2verify”brand name on a rarely-seen nameserver “bb-online.biz”+1 more
Highbinancerobcar.funscore 55echoes binance· empty page
brand in the name “binance”TLD with a high abuse rate “fun”brand name at a retail registrar “Name.com, Inc.”brand name and brand-styled page “binance”

Model opinion: looks like a scam (target: Binance), confidence 85%. An opinion, not a finding.

Highblendgo2026-myshopify.storescore 55echoes shopify· other
brand in the name “shopify”brand plus digits “blendgo2026-myshopify”brand name at a retail registrar “Namify Domains Inc”brand in page title, not in the name “cloudflare”

Model opinion: looks like abuse (target: Shopify), confidence 60%. An opinion, not a finding.

Highbooking-pre-auth.shopscore 55echoes booking· robots.txt denied
brand in the name “booking”lure words (login, verify, secure…) “auth”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GNAME.COM PTE. LTD.”+1 more

Same data as JSON: /api/zone/risk?day=2026-10-02&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.