Flagged newborn domains, Friday, October 16, 2026

36 names at tier low or above in .cloud, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highfinance-wallets-alpha-prod-cdn.cloudscore 55echoes binance· no web server
one-letter brand typo “finance≈binance”lure words (login, verify, secure…) “wallet”many hyphens “4”very long name “30”
Highwificloud.cloudscore 50echoes icloud· empty page
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NAMECHEAP”brand name at a watch-list registrar “NAMECHEAP”

Model opinion: suspicious (target: Apple), confidence 65%. An opinion, not a finding.

Highcolnbase.cloudscore 48echoes coinbase· no DNS
one-letter brand typo “colnbase≈coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highfinance-beta-connects-alpha-cdn.cloudscore 46echoes binance· no web server
one-letter brand typo “finance≈binance”many hyphens “4”very long name “31”brand name at a retail registrar “Web Commerce Communications Ltd.”
Highedge-microsoft.cloudscore 44echoes microsoft· empty page
brand in the name “microsoft”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Hightelgram.cloudscore 42echoes telegram· active website
one-letter brand typo “telgram≈telegram”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks like abuse (target: Telegram), confidence 80%. An opinion, not a finding.

Mediummrtech.cloudscore 38· active website
brand in page title, not in the name “nvidia”form on a brand-styled page “has_form”
Mediumorbitplay.cloudscore 38· active website
brand in page title, not in the name “playstation”form on a brand-styled page “has_form”
Mediumthmedia.cloudscore 38· active website
brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”
Mediumabya.cloudscore 30· active website
page asks for credentials “Sign in to your account”
Lowcom-portal-online-wallets-edge.cloudscore 22· parked, for sale
lure words (login, verify, secure…) “portal,wallet”many hyphens “4”very long name “30”
Lowcryptotechguruji.cloudscore 22· active website
page impersonates a brand “Binance”
Lowagentdaichong.cloudscore 20· active website
brand in page title, not in the name “chatgpt”
Lowauuceessor.cloudscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowchatfusion.cloudscore 20· active website
brand in page title, not in the name “amazon”
Lowdomussrls.cloudscore 20· redirects elsewhere
brand in page title, not in the name “wordpress”
Lowdvtventure.cloudscore 20· other
brand in page title, not in the name “cloudflare”
Lowfreeadobecc.cloudscore 20echoes adobe· no DNS
brand in the name “adobe”brand name behind Cloudflare “cloudflare.com”
Lowmusic-letter.cloudscore 20· server error
brand in page title, not in the name “cloudflare”
Lowmyrift.cloudscore 20· redirects elsewhere
brand in page title, not in the name “cloudflare”
Lownodocs.cloudscore 20· active website
brand in page title, not in the name “okta”
Lowpyoing.cloudscore 20· server error
brand in page title, not in the name “cloudflare”
Lowsaltines.cloudscore 20· empty page
brand in page title, not in the name “hostinger”
Lowsigamos.cloudscore 20· active website
brand in page title, not in the name “apple”
Lowvanlogixerp.cloudscore 20· empty page
brand in page title, not in the name “google”
Lowvuktod.cloudscore 20· active website
brand in page title, not in the name “tesla”
Lowag-alpha-gateway-edge-secure.cloudscore 16· no web server
lure words (login, verify, secure…) “secure”many hyphens “4”very long name “28”
Lowlmspustakasaintech.cloudscore 14· active website
login form “has_form+login words”
Lowmaila.cloudscore 14· active website
login form “has_form+login words”
Lowaccountshareprogram.cloudscore 12· no DNS
lure words (login, verify, secure…) “account,accounts”
Lowcom-online-app-swap-wallets.cloudscore 12· parked, for sale
lure words (login, verify, secure…) “wallet”many hyphens “4”
Lowdcsolutions-services.cloudscore 12· empty page
lure words (login, verify, secure…) “service,services”
Lowedenservices.cloudscore 12· robots.txt denied
lure words (login, verify, secure…) “service,services”
Lowevo-services.cloudscore 12· boilerplate page
lure words (login, verify, secure…) “service,services”
Lowkajomaservices.cloudscore 12· no web server
lure words (login, verify, secure…) “service,services”
Lowio-cdn-token-api-gateway-gateway.cloudscore 10· no web server
many hyphens “5”very long name “32”

Same data as JSON: /api/zone/risk?day=2026-10-16&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.