Flagged newborn domains, Friday, October 16, 2026

16,690 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highcounterintuit.orgscore 50echoes intuit· not probed yet
brand in the name “intuit”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highcustomersolution.topscore 50· active website
lure words (login, verify, secure…) “customer,customers”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”page impersonates a brand “PayPal”

Model opinion: looks like phishing (target: PayPal), confidence 86%. An opinion, not a finding.

Highdestisiam30.proscore 50· active website
page asks for credentials “sign in to your account”login form “has_form+login words”form submits over plain HTTP “http://destisiam30.pro/”

Model opinion: looks benign, confidence 50%. An opinion, not a finding.

Highdigitalbusiuness-cibc.comscore 50echoes cibc
brand in the name “cibc”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highdigitalbusuiness-cibc.comscore 50echoes cibc
brand in the name “cibc”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highdropboxdocsends.comscore 50echoes dropbox
brand in the name “dropbox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highdteamunlocked.orgscore 50· active website
lure words (login, verify, secure…) “locked,unlock”brand in page title, not in the name “steam”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 88%. An opinion, not a finding.

Highexploreinamazon.comscore 50echoes amazon
brand in the name “amazon”brand name on a rarely-seen nameserver “supercp.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highfachpersonal-rolfesschwab.comscore 50echoes schwab
brand in the name “schwab”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highfallenvanguard.spacescore 50echoes vanguard· boilerplate page
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highfinance-cloud.workscore 50echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “work”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highfinance-mqjh.clickscore 50echoes binance· boilerplate page
one-letter brand typo “finance≈binance”TLD with a high abuse rate “click”brand name at a retail registrar “NAMECHEAP”brand name at a watch-list registrar “NAMECHEAP”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highfinance-platform.workscore 50echoes binance· no DNS
one-letter brand typo “finance≈binance”TLD with a high abuse rate “work”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highfinance-software.workscore 50echoes binance· no DNS
one-letter brand typo “finance≈binance”TLD with a high abuse rate “work”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highfinancial-cloud.workscore 50echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “work”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highfindvanguard.infoscore 50echoes vanguard· no DNS
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highfixvanguard.infoscore 50echoes vanguard· no DNS
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highgame-play-google.comscore 50echoes google
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highgame-playgoogle.comscore 50echoes google
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highgameplay-google.comscore 50echoes google
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highgecebay.comscore 50echoes ebay
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highgemini4argongoogleai.lolscore 50echoes google· not probed yet
brand in the name “google”brand plus digits “gemini4argongoogleai”TLD with a high abuse rate “lol”brand name behind Cloudflare “cloudflare.com”+2 more
Highgetvanguard.infoscore 50echoes vanguard· no DNS
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highgoogleg.lovescore 50echoes google· not probed yet
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
Highhitvanguard.infoscore 50echoes vanguard· no DNS
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highhotvanguard.infoscore 50echoes vanguard· no DNS
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highicloudflndmy.comscore 50echoes icloud
brand in the name “icloud”brand name on a rarely-seen nameserver “supermag-5.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highjamuslotmobile.comscore 50echoes tmobile
brand in the name “tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highjoinvanguard.infoscore 50echoes vanguard· no DNS
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highjornadaadobe.comscore 50echoes adobe
brand in the name “adobe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highkeyvanguard.infoscore 50echoes vanguard· no DNS
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highlazadaslotresmi.comscore 50echoes lazada
brand in the name “lazada”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highlcloud-lphone.restscore 50echoes icloud· other
one-letter brand typo “lcloud≈icloud”TLD with a high abuse rate “rest”brand name at a retail registrar “Dynadot, LLC”brand name at a watch-list registrar “Dynadot, LLC”

Model opinion: looks like abuse (target: Apple), confidence 86%. An opinion, not a finding.

Highletvanguard.infoscore 50echoes vanguard· no DNS
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highmaillchimp.icuscore 50echoes mailchimp· empty page
one-letter brand typo “maillchimp≈mailchimp”TLD with a high abuse rate “icu”brand name on a rarely-seen nameserver “impreza.host”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”

Model opinion: looks like abuse (target: Mailchimp), confidence 80%. An opinion, not a finding.

Highmaxvanguard.infoscore 50echoes vanguard· no DNS
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highmeetvanguard.infoscore 50echoes vanguard· no DNS
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highmerchantcashapp.comscore 50echoes cashapp
brand in the name “cashapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highmicrosoft-assist.comscore 50echoes microsoft
brand in the name “microsoft”brand name on a rarely-seen nameserver “qhoster.net”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highmonrecover-ledger.comscore 50echoes ledger
ambiguous brand word “ledger”lure words (login, verify, secure…) “recover”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Highmymagicgmail.onlinescore 50echoes gmail· boilerplate page
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highnetflix-miembros.infoscore 50echoes netflix· not probed yet
brand in the name “netflix”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highnewvanguard.infoscore 50echoes vanguard· no DNS
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highnorvexis-silvermeadow.clickscore 50· active website
TLD with a high abuse rate “click”page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.

Highoutiook-authify.icuscore 50echoes outlook· no web server
one-letter brand typo “outiook≈outlook”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Eranet International Limited”
Highownvanguard.infoscore 50echoes vanguard· no DNS
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highpaypalcasino-se.comscore 50echoes paypal
brand in the name “paypal”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highpersonal-rolfes-schwab.comscore 50echoes schwab
brand in the name “schwab”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highplay-googie.icuscore 50echoes google· empty page
one-letter brand typo “googie≈google”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Eranet International Limited”

Model opinion: looks like abuse (target: Google Play), confidence 80%. An opinion, not a finding.

Highprivateslack.comscore 50echoes slack
brand in the name “slack”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Same data as JSON: /api/zone/risk?day=2026-10-16&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.