Flagged newborn domains, Saturday, October 3, 2026

2,269 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:10-03 10-02 10-01 09-30 09-28 09-27 09-26 09-25 09-22 09-21

Highicloudimaps.infoscore 50echoes icloud· boilerplate page

brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”

Model opinion: looks like abuse (target: Apple (iCloud)), confidence 80%. An opinion, not a finding.

Highinfolynxbox.comscore 50echoes xbox

brand in the name “xbox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Highjojobetmobile.comscore 50echoes tmobile

brand in the name “tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”

Highkakao-play.asiascore 50echoes kakao· no DNS

brand in the name “kakao”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Highkapuas88-mobile.comscore 50echoes tmobile

one-letter brand typo “mobile≈tmobile”brand plus digits “kapuas88-mobile”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Highkara-coinbase.comscore 50echoes coinbase

brand in the name “coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”

Highlarpyourcharacter-roblox.wikiscore 50echoes roblox· not probed yet

brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Highlorrainedesjardins.comscore 50echoes desjardins

brand in the name “desjardins”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Highmailgmailg00gilea.digitalscore 50echoes gmail· boilerplate page

brand in the name “gmail”brand plus digits “mailgmailg00gilea”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+2 more

Model opinion: suspicious, confidence 40%. An opinion, not a finding.

Highmercadolibresdkfhew.shopscore 50echoes mercadolibre· no DNS

brand in the name “mercadolibre”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GNAME.COM PTE. LTD.”brand name at a watch-list registrar “GNAME.COM PTE. LTD.”

Highnaturalwellnessoutlook.comscore 50echoes outlook

brand in the name “outlook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”

Highnaturalwellnessoutlook.sitescore 50echoes outlook· no DNS

Highnavyfederalncu.orgscore 50echoes navyfederal· not probed yet

brand in the name “navyfederal”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Highnayahamazon.comscore 50echoes amazon

brand in the name “amazon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Highneondungeonvanguard.clubscore 50echoes vanguard· robots.txt denied

brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Highnotallowedscript68d72c387ab89gmail.comscore 50echoes gmail· active website

brand in the name “gmail”very long name “34”brand plus digits “notallowedscript68d72c387ab89gmail”brand name at a retail registrar “OVH sas”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highokta-signinsso.comscore 50echoes okta· placeholder page

ambiguous brand word “okta”lure words (login, verify, secure…) “signin”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more

Model opinion: looks like abuse (target: Okta), confidence 80%. An opinion, not a finding.

Higholdcat.lolscore 50· active website

TLD with a high abuse rate “lol”page impersonates a brand “Netflix”brand in page title, not in the name “tiktok”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highopenai-credit.comscore 50echoes openai

brand in the name “openai”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”

Highopenseaforanimalscode.wikiscore 50echoes opensea· active website

brand in the name “opensea”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks benign, confidence 53%. An opinion, not a finding.

Highopensi.autosscore 50echoes openai· no DNS

one-letter brand typo “opensi≈openai”TLD with a high abuse rate “autos”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”

Highopensi.homesscore 50echoes openai· no DNS

one-letter brand typo “opensi≈openai”TLD with a high abuse rate “homes”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”

Highpalapp.funscore 50· active website

TLD with a high abuse rate “fun”page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: suspicious (target: PayPal), confidence 72%. An opinion, not a finding.

Highpawpal.onlinescore 50echoes paypal· parked, for sale

one-letter brand typo “pawpal≈paypal”brand name on a rarely-seen nameserver “tld.pl”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”brand name redirects elsewhere “sedo.com”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highphiddy.xyzscore 50· active website

TLD with a high abuse rate “xyz”page impersonates a brand “Coinbase”brand in page title, not in the name “robinhood”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highpixelquestvanguard.clubscore 50echoes vanguard· not probed yet

brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Highplainworkday.comscore 50echoes workday

brand in the name “workday”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”

Highquietworkday.comscore 50echoes workday

brand in the name “workday”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”

Highratesoutlook.comscore 50echoes outlook

brand in the name “outlook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”

Highrefluencedtiktok.comscore 50echoes tiktok

brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”

Highrevenuehmrc.sitescore 50echoes hmrc· no DNS

brand in the name “hmrc”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”

Highrobloxoutfits.netscore 50echoes roblox

brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Highsitusslotshopee.comscore 50echoes shopee

brand in the name “shopee”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Highsloptowerdefense-roblox.wikiscore 50echoes roblox· not probed yet

brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Highsolstice-finance.icuscore 50echoes binance· parked, for sale

one-letter brand typo “finance≈binance”TLD with a high abuse rate “icu”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highstarlinkova.infoscore 50echoes starlink· not probed yet

brand in the name “starlink”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”

Highstealaverityroblox.wikiscore 50echoes roblox· active website

brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks benign, confidence 94%. An opinion, not a finding.

Highsterling-transportation.comscore 50echoes starling

one-letter brand typo “sterling≈starling”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”

Highstratfordfidelity.comscore 50echoes fidelity

brand in the name “fidelity”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”

Highstudy-cloud.icuscore 50echoes icloud· no web server

one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “icu”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”

Hightelegram-nudes-france.sitescore 50echoes telegram· not probed yet

brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Hightelegram-onlyfans-france.bestscore 50echoes telegram· not probed yet

brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Hightheflipcoin.xyzscore 50· active website

TLD with a high abuse rate “xyz”page impersonates a brand “Coinbase”brand in page title, not in the name “coinbase”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Hightiktok-slots.comscore 50echoes tiktok

brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “DEVEXPANSE LTD d/b/a Regery.com”brand name at a watch-list registrar “DEVEXPANSE LTD d/b/a Regery.com”

Hightiremanorixbox.digitalscore 50echoes xbox· not probed yet

brand in the name “xbox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Hightryagentbase.funscore 50· active website

TLD with a high abuse rate “fun”page impersonates a brand “MetaMask”brand in page title, not in the name “metamask”

Model opinion: suspicious, confidence 56%. An opinion, not a finding.

Hightwitterator.orgscore 50echoes twitter· active website

brand in the name “twitter”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: looks benign, confidence 96%. An opinion, not a finding.

Highuledger.funscore 50echoes ledger· empty page

one-letter brand typo “uledger≈ledger”TLD with a high abuse rate “fun”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highuse-folio.xyzscore 50· active website

TLD with a high abuse rate “xyz”page impersonates a brand “Netflix”brand in page title, not in the name “robinhood”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highwestonoutlook.solutionsscore 50echoes outlook· not probed yet

brand in the name “outlook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”

Same data as JSON: /api/zone/risk?day=2026-10-03&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.