Flagged newborn domains, Saturday, October 10, 2026

9,107 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highlcloud-web.sbsscore 55echoes icloud· no DNS
one-letter brand typo “lcloud≈icloud”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Highledgeru-pdate.comscore 55echoes ledger
one-letter brand typo “ledgeru≈ledger”lure words (login, verify, secure…) “update”brand name on a rarely-seen nameserver “ezydomain.com”
Highliferevolution.newsscore 55echoes revolut· registrar placeholder
brand in the name “revolut”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”brand in page title, not in the name “hostinger”+1 more

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highlogin-myshopify.comscore 55echoes shopify
brand in the name “shopify”lure words (login, verify, secure…) “login”brand name behind Cloudflare “cloudflare.com”
Highlogin-tiktok.comscore 55echoes tiktok
brand in the name “tiktok”lure words (login, verify, secure…) “login”
Highmicrosoftsecurity.trainingscore 55echoes microsoft· empty page
brand in the name “microsoft”lure words (login, verify, secure…) “security”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks like abuse (target: Microsoft), confidence 60%. An opinion, not a finding.

Highopensi.momscore 55echoes openai· robots.txt denied
one-letter brand typo “opensi≈openai”TLD with a high abuse rate “mom”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Highopensi.sbsscore 55echoes openai· robots.txt denied
one-letter brand typo “opensi≈openai”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Highorientporn.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highphpporn.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 68%. An opinion, not a finding.

Highpornlogo.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 70%. An opinion, not a finding.

Highpornlong.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 66%. An opinion, not a finding.

Highpornlookup.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 66%. An opinion, not a finding.

Highpornmanual.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 68%. An opinion, not a finding.

Highpornmark.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 68%. An opinion, not a finding.

Highrateconfirmation-cloud.comscore 55echoes icloud
one-letter brand typo “cloud≈icloud”lure words (login, verify, secure…) “confirm,confirmation”
Highrecipeporn.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highrecordporn.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Highrentingporn.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highresetporn.xyzscore 55· boilerplate page
lure words (login, verify, secure…) “reset”TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”+1 more

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highresourceporn.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Highrevolutiondogservices.comscore 55echoes revolut
brand in the name “revolut”lure words (login, verify, secure…) “service,services”
Highrideporn.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Highroadporn.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 66%. An opinion, not a finding.

Highrocketporn.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 65%. An opinion, not a finding.

Highronaldo4d-mobile.netscore 55echoes tmobile
one-letter brand typo “mobile≈tmobile”brand plus digits “ronaldo4d-mobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Highrootporn.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 65%. An opinion, not a finding.

Highrouletteporn.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 68%. An opinion, not a finding.

Highrousp5.wikiscore 55echoes usps· not probed yet
brand spelled with digits “rousp5→usps”brand plus digits “rousp5”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Highrouteporn.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highsafetyporn.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highsampleporn.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 70%. An opinion, not a finding.

Highscoreporn.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highscotiabank-verifymyapp.comscore 55echoes scotiabank· empty page
brand in the name “scotiabank”lure words (login, verify, secure…) “verify”

Model opinion: looks like abuse (target: Scotiabank), confidence 80%. An opinion, not a finding.

Highscreenporn.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 70%. An opinion, not a finding.

Highsecondporn.xyzscore 55· boilerplate page
TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “25 identical pages”

Model opinion: looks like abuse, confidence 70%. An opinion, not a finding.

Highsecretbinanceservice.lolscore 55echoes binance· parked, for sale
brand in the name “binance”lure words (login, verify, secure…) “service”TLD with a high abuse rate “lol”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: looks like abuse (target: Binance), confidence 80%. An opinion, not a finding.

Highsecurity-ionos.sitescore 55echoes ionos· robots.txt denied
brand in the name “ionos”lure words (login, verify, secure…) “security”free DNS provider “dnsowl.com”
Highsecuritycoinbase.infoscore 55echoes coinbase· no DNS
brand in the name “coinbase”lure words (login, verify, secure…) “security”brand name on a rarely-seen nameserver “alexhost.com”
Highservicesschwab.comscore 55echoes schwab
brand in the name “schwab”lure words (login, verify, secure…) “service,services”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsettings-apple-id.comscore 55echoes apple
brand in the name “apple”lure words (login, verify, secure…) “id”brand name behind Cloudflare “cloudflare.com”
Highshanhaicloud.sitescore 55echoes icloud· boilerplate page
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highsharepoint-document-verifier.icuscore 55echoes sharepoint· no DNS
brand in the name “sharepoint”very long name “28”TLD with a high abuse rate “icu”free DNS provider “dnsowl.com”+2 more
Highshopifyrecover.comscore 55echoes shopify
brand in the name “shopify”lure words (login, verify, secure…) “recover”
Highstarlinksinvestgroup.xyzscore 55echoes starlink· boilerplate page
brand in the name “starlink”TLD with a high abuse rate “xyz”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.Ş.”identical page on many newborns “43 identical pages”

Model opinion: looks like abuse (target: Starlink), confidence 72%. An opinion, not a finding.

Highstarlinkwe.topscore 55echoes starlink· empty page
brand in the name “starlink”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “starlink”

Model opinion: looks like a scam (target: Starlink), confidence 85%. An opinion, not a finding.

Highstripertracker.comscore 55echoes stripe
brand in the name “stripe”lure words (login, verify, secure…) “track”brand name behind Cloudflare “cloudflare.com”
Highsygnun-revo1ut.comscore 55echoes revolut
brand spelled with digits “sygnun-revo1ut→revolut”brand plus digits “sygnun-revo1ut”brand name on a rarely-seen nameserver “awsdns-16.org”brand name at a retail registrar “Amazon Registrar, Inc.”
Hightiktok88fun.livescore 55echoes tiktok· not probed yet
brand in the name “tiktok”brand plus digits “tiktok88fun”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Hightrastwallet.netscore 55echoes trustwallet
one-letter brand typo “trastwallet≈trustwallet”lure words (login, verify, secure…) “wallet”brand name behind Cloudflare “cloudflare.com”

Same data as JSON: /api/zone/risk?day=2026-10-10&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.