Flagged newborn domains, Thursday, October 15, 2026

48 names at tier high or above in .top, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticaltesla-ai-south-africa.topscore 79echoes tesla· active website
ambiguous brand word “tesla”many hyphens “3”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”+3 more

Model opinion: looks like a scam (target: Tesla), confidence 92%. An opinion, not a finding.

Criticalavantage-finance.topscore 60echoes binance· active website
one-letter brand typo “finance≈binance”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 88%. An opinion, not a finding.

Highnetbonuslix.topscore 56· active website
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “top”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks like abuse (target: Netflix), confidence 77%. An opinion, not a finding.

Highgmailm.topscore 55echoes gmail· redirects elsewhere
brand in the name “gmail”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”+1 more

Model opinion: looks like abuse (target: Gmail (Google)), confidence 62%. An opinion, not a finding.

Highhkparrotapp13.topscore 55echoes apple· no DNS
brand spelled with digits “hkparrotapp13→apple”brand plus digits “hkparrotapp13”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highepxhdy.topscore 54· redirects elsewhere
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highmhnhjd.topscore 54· redirects elsewhere
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 56%. An opinion, not a finding.

Highmkptpb.topscore 54· redirects elsewhere
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 47%. An opinion, not a finding.

Highmymbxd.topscore 54· redirects elsewhere
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 42%. An opinion, not a finding.

Highpveshj.topscore 54· redirects elsewhere
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 47%. An opinion, not a finding.

Highufetjf.topscore 54· redirects elsewhere
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 48%. An opinion, not a finding.

Highlyvanguard.topscore 53echoes vanguard· active website
brand in the name “vanguard”TLD with a high abuse rate “top”brand name and brand-styled page “vanguard”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highcxco.topscore 52· active website
TLD with a high abuse rate “top”brand in page title, not in the name “outlook”form on a brand-styled page “has_form”form submits over plain HTTP “http://cxco.top/”

Model opinion: looks benign, confidence 66%. An opinion, not a finding.

Highgoogledeck.topscore 52echoes google· blocked the probe
brand in the name “google”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name redirects elsewhere “thebalancemoney.com”
Highlcloud-device.topscore 52echoes icloud· boilerplate page
one-letter brand typo “lcloud≈icloud”TLD with a high abuse rate “top”brand name on a rarely-seen nameserver “soportedns.top”identical page on many newborns “34 identical pages”

Model opinion: looks like abuse (target: Apple), confidence 77%. An opinion, not a finding.

Highxx80x.topscore 51echoes xbox· not probed yet
brand spelled with digits “xx80x→xbox”brand plus digits “xx80x”TLD with a high abuse rate “top”
Highnettimewin.topscore 50· active website
TLD with a high abuse rate “top”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks like abuse (target: Netflix), confidence 80%. An opinion, not a finding.

Highaureus-ai-spane.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highcapitalia.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highcatalog-telega.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Highcopycenter.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 96%. An opinion, not a finding.

Highdrakmyelo-ixvaren-germany.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highimmediate-force-mob.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highitalian-ai-tech.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highkingdomarabic.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highlumenamoments.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highmetreturneth-swiss.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highneupragenz.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highporn-chat.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 69%. An opinion, not a finding.

Highpybjm.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “hubspot”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highrenditaai.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highrsystvs01.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 50%. An opinion, not a finding.

Hightgsearch.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 53%. An opinion, not a finding.

Highvirt-sex.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 66%. An opinion, not a finding.

Highwedeventnation.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 44%. An opinion, not a finding.

Highicloudacess.topscore 44echoes icloud· no DNS
brand in the name “icloud”TLD with a high abuse rate “top”brand name on a rarely-seen nameserver “elitebytehostdns.com”
Highsuportenetflix.topscore 44echoes netflix· no DNS
brand in the name “netflix”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highajk-whatsapzp.topscore 42echoes whatsapp· no DNS
one-letter brand typo “whatsapzp≈whatsapp”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highbdx-whatsapzp.topscore 42echoes whatsapp· no DNS
one-letter brand typo “whatsapzp≈whatsapp”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Higheon-whatsapzp.topscore 42echoes whatsapp· no DNS
one-letter brand typo “whatsapzp≈whatsapp”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highhilf-paypul.topscore 42echoes paypal· boilerplate page
one-letter brand typo “paypul≈paypal”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highkic-whatsapzp.topscore 42echoes whatsapp· no DNS
one-letter brand typo “whatsapzp≈whatsapp”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highmqv-whatsapzp.topscore 42echoes whatsapp· no DNS
one-letter brand typo “whatsapzp≈whatsapp”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highosh-whatsapzp.topscore 42echoes whatsapp· no DNS
one-letter brand typo “whatsapzp≈whatsapp”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highrfp-whatsapzp.topscore 42echoes whatsapp· no DNS
one-letter brand typo “whatsapzp≈whatsapp”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Hightlg-whatsapzp.topscore 42echoes whatsapp· no DNS
one-letter brand typo “whatsapzp≈whatsapp”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highwxb-whatsapzp.topscore 42echoes whatsapp· no DNS
one-letter brand typo “whatsapzp≈whatsapp”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highyuz-whatsapzp.topscore 42echoes whatsapp· no DNS
one-letter brand typo “whatsapzp≈whatsapp”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”

Same data as JSON: /api/zone/risk?day=2026-10-15&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.