Flagged newborn domains, Saturday, October 10, 2026

317 names at tier medium or above in .top, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticaldirotaobao.topscore 62echoes taobao· active website
brand in the name “taobao”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Criticalzenotaobao.topscore 62echoes taobao· active website
brand in the name “taobao”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.

High5bgpx8u7zsecureefilesharepoint.topscore 55echoes sharepoint· redirects elsewhere
brand in the name “sharepoint”lure words (login, verify, secure…) “secure”very long name “30”brand plus digits “5bgpx8u7zsecureefilesharepoint”+3 more

Model opinion: looks like phishing (target: Microsoft (SharePoint)), confidence 68%. An opinion, not a finding.

High5mbcom.topscore 55echoes smbc· no DNS
brand spelled with digits “5mbcom→smbc”brand plus digits “5mbcom”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks like abuse (target: SMBC (Sumitomo Mitsui Banking Corporation)), confidence 60%. An opinion, not a finding.

Highapple-ui2.topscore 55echoes apple· no web server
brand in the name “apple”brand plus digits “apple-ui2”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Highapple-ui3.topscore 55echoes apple· no web server
brand in the name “apple”brand plus digits “apple-ui3”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Highfilestorage-adobedrive.topscore 55echoes adobe· redirects elsewhere
brand in the name “adobe”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo,LLC”+4 more

Model opinion: looks like abuse (target: Adobe), confidence 72%. An opinion, not a finding.

Highstarlinkwe.topscore 55echoes starlink· empty page
brand in the name “starlink”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “starlink”

Model opinion: looks like a scam (target: Starlink), confidence 85%. An opinion, not a finding.

Highapple-hu1.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-hu1”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-hu2.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-hu2”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-hu3.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-hu3”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-ui1.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-ui1”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highcam-strip.topscore 54echoes stripe· active website
one-letter brand typo “strip≈stripe”TLD with a high abuse rate “top”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highke3-apple.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “ke3-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highke4-apple.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “ke4-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highke5-apple.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “ke5-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highke6-apple.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “ke6-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highke7-apple.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “ke7-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highke8-apple.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “ke8-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highnackt-strip.topscore 54echoes stripe· active website
one-letter brand typo “strip≈stripe”TLD with a high abuse rate “top”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Highpo1-apple.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “po1-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highxu2-apple.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “xu2-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highbrisk-cloud-box.topscore 52echoes icloud· boilerplate page
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”identical page on many newborns “43 identical pages”

Model opinion: unreachable when judged, confidence 60%. An opinion, not a finding.

Highforgebay.topscore 52echoes ebay· no DNS
brand in the name “ebay”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “烟台帝思普网络科技有限公司”
Highukraineanimalhelper.topscore 50· active website
TLD with a high abuse rate “top”page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: suspicious, confidence 62%. An opinion, not a finding.

Highchoiagency.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highcircusvpn.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 63%. An opinion, not a finding.

Highfastpitchat.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “chatgpt”form on a brand-styled page “has_form”

Model opinion: suspicious (target: OpenAI/ChatGPT), confidence 72%. An opinion, not a finding.

Highgrandpashayenigiris.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highgtwlve.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 50%. An opinion, not a finding.

Highhorizonte-trancheerax-italy.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highkinetiqeco.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highletsclick.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 44%. An opinion, not a finding.

Highogxs.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 52%. An opinion, not a finding.

Highqfsvaultasset.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “ledger”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.

Highvipoleret.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highyieldlyasset.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 45%. An opinion, not a finding.

Highdunotaobao.topscore 44echoes taobao· not probed yet
brand in the name “taobao”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highgooglecloud-storage.topscore 44echoes google· not probed yet
brand in the name “google”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highgooglellm.topscore 44echoes google· empty page
brand in the name “google”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highshopifyh.topscore 44echoes shopify· not probed yet
brand in the name “shopify”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Hightiktokorder.topscore 44echoes tiktok· no DNS
brand in the name “tiktok”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highwalmait.topscore 44echoes walmart· no DNS
one-letter brand typo “walmait≈walmart”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highcloud-core.topscore 42echoes icloud· active website
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Highopen-si.topscore 42echoes openai· no DNS
one-letter brand typo “opensi≈openai”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Hightesta-school-of-economics-japan.topscore 40· active website
many hyphens “4”very long name “31”TLD with a high abuse rate “top”page impersonates a brand “Coinbase”

Model opinion: looks like a scam, confidence 90%. An opinion, not a finding.

Mediumbramblebay67.topscore 38echoes ebay· robots.txt denied
brand in the name “ebay”brand plus digits “bramblebay67”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Mediumjadeche.topscore 38· active website
TLD with a high abuse rate “top”page asks for credentials “log in to your account”
Mediumsmbcewh.topscore 38echoes smbc· no DNS
brand in the name “smbc”TLD with a high abuse rate “top”
Mediumai-mechat.topscore 36echoes wechat· active website
one-letter brand typo “mechat≈wechat”TLD with a high abuse rate “top”

Same data as JSON: /api/zone/risk?day=2026-10-10&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.