Flagged newborn domains, Tuesday, October 6, 2026

10,414 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highgodadddy.sbsscore 50echoes godaddy· not probed yet
one-letter brand typo “godadddy≈godaddy”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highgranitebay.sitescore 50echoes ebay· robots.txt denied
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highhermitshell.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Coinbase”brand in page title, not in the name “robinhood”

Model opinion: looks like a scam, confidence 70%. An opinion, not a finding.

Highhiddenbid.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: suspicious (target: Binance), confidence 72%. An opinion, not a finding.

Highicloudpk.comscore 50echoes icloud
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highinbox-cloud.comscore 50echoes icloud
one-letter brand typo “cloud≈icloud”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highinstagramquestions.comscore 50echoes instagram
brand in the name “instagram”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highitngmail.comscore 50echoes gmail
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highjhinkgmaplebay.casascore 50echoes ebay· no DNS
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun”brand name at a watch-list registrar “Porkbun”
Highjinyuncloud.momscore 50· active website
TLD with a high abuse rate “mom”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Highjinyuncloud.sbsscore 50· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Highjojobet-mobile.vipscore 50echoes tmobile· active website
brand in the name “tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”

Model opinion: looks benign, confidence 56%. An opinion, not a finding.

Highjojobetmobile.vipscore 50echoes tmobile· blocked the probe
brand in the name “tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highjojobetwordpress.vipscore 50echoes wordpress· not probed yet
brand in the name “wordpress”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highkakao-slots.asiascore 50echoes kakao· boilerplate page
brand in the name “kakao”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: looks like abuse (target: Kakao), confidence 70%. An opinion, not a finding.

Highkeyon-coinbase.comscore 50echoes coinbase· no DNS
brand in the name “coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highkraven-hunter-lordfilm.camscore 50echoes kraken· active website
one-letter brand typo “kraven≈kraken”TLD with a high abuse rate “cam”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.

Highlazadatotoemas.comscore 50echoes lazada
brand in the name “lazada”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highledgers.winscore 50echoes ledger· no DNS
one-letter brand typo “ledgers≈ledger”TLD with a high abuse rate “win”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highmaccplusaa.onlinescore 50echoes usaa· empty page
brand in the name “usaa”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: suspicious (target: USAA), confidence 65%. An opinion, not a finding.

Highmalaspinasantander.comscore 50echoes santander
brand in the name “santander”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highmcpad.funscore 50· active website
TLD with a high abuse rate “fun”page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: suspicious, confidence 46%. An opinion, not a finding.

Highmercado-pago-invest.comscore 50echoes mercadopago
brand in the name “mercadopago”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highmercadolibrecapitalai.comscore 50echoes mercadolibre
brand in the name “mercadolibre”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highmercadolibrecapitalar.comscore 50echoes mercadolibre
brand in the name “mercadolibre”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highmicrosoftteammz.comscore 50echoes microsoft
brand in the name “microsoft”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highmizuhofudousan.comscore 50echoes mizuho· not probed yet
brand in the name “mizuho”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highmnusrsupedatesrptinnewschedle.sbsscore 50· blocked the probe
very long name “29”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highmymovieroblox.wikiscore 50echoes roblox· not probed yet
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highnetflixcasino-sk.comscore 50echoes netflix
brand in the name “netflix”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highnpenai.comscore 50echoes openai· redirects elsewhere
one-letter brand typo “npenai≈openai”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”brand name redirects elsewhere “l.ink”

Model opinion: looks like abuse (target: OpenAI), confidence 72%. An opinion, not a finding.

Highopenaiapialternative.comscore 50echoes openai
brand in the name “openai”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highopenaiapipricing.comscore 50echoes openai
brand in the name “openai”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highopenaiapiproxy.comscore 50echoes openai
brand in the name “openai”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highopenaicompatibleapi.comscore 50echoes openai
brand in the name “openai”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highopenaigatewayapi.comscore 50echoes openai
brand in the name “openai”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highpatenjitushopee.comscore 50echoes shopee
brand in the name “shopee”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highpdfadobe.comscore 50echoes adobe
brand in the name “adobe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highphantomx.lolscore 50echoes phantom· server error
one-letter brand typo “phantomx≈phantom”TLD with a high abuse rate “lol”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Eranet International Limited”

Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.

Highqingyunti-jc.lolscore 50· active website
TLD with a high abuse rate “lol”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 68%. An opinion, not a finding.

Highrevolutbank.appscore 50echoes revolut· other
brand in the name “revolut”brand in page title, not in the name “cloudflare”

Model opinion: unreachable when judged, confidence 95%. An opinion, not a finding.

Highrobloxchets.proscore 50echoes roblox· empty page
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”

Model opinion: suspicious (target: Roblox), confidence 65%. An opinion, not a finding.

Highsafetyhsbc.comscore 50echoes hsbc
brand in the name “hsbc”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsahabetmobile.comscore 50echoes tmobile· not probed yet
brand in the name “tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highsalesforcetonotion.comscore 50echoes salesforce· not probed yet
brand in the name “salesforce”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highscopify.infoscore 50echoes shopify· active website
one-letter brand typo “scopify≈shopify”page impersonates a brand “PayPal”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highsecureweb-chase.onlinescore 50echoes chase· no DNS
ambiguous brand word “chase”lure words (login, verify, secure…) “secure”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Highsolve-coinbase.comscore 50echoes coinbase· not probed yet
brand in the name “coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsridharan-coinbase.comscore 50echoes coinbase
brand in the name “coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsuyuntissr.lolscore 50· active website
TLD with a high abuse rate “lol”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-06&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.