Flagged newborn domains, Saturday, October 17, 2026

971 names at tier high or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

High543901coinbase.comscore 55echoes coinbase
brand in the name “coinbase”brand plus digits “543901coinbase”random-looking name “H=3.81”brand name behind Cloudflare “cloudflare.com”+1 more

Model opinion: suspicious (target: coinbase), confidence 65%. An opinion, not a finding.

High713423coinbase.comscore 55echoes coinbase
brand in the name “coinbase”brand plus digits “713423coinbase”random-looking name “H=3.66”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: suspicious (target: coinbase), confidence 65%. An opinion, not a finding.

High785452-coinbase.comscore 55echoes coinbase
brand in the name “coinbase”brand plus digits “785452-coinbase”random-looking name “H=3.66”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: suspicious (target: coinbase), confidence 70%. An opinion, not a finding.

High931703coinbase.comscore 55echoes coinbase
brand in the name “coinbase”brand plus digits “931703coinbase”random-looking name “H=3.66”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: suspicious (target: coinbase), confidence 66%. An opinion, not a finding.

High95835-robinhood.comscore 55echoes robinhood
brand in the name “robinhood”brand plus digits “95835-robinhood”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more

Model opinion: suspicious (target: robinhood), confidence 69%. An opinion, not a finding.

Highaccounts-gooqle.comscore 55echoes google
one-letter brand typo “gooqle≈google”lure words (login, verify, secure…) “account,accounts”

Model opinion: suspicious (target: google), confidence 65%. An opinion, not a finding.

Highae888v4.camscore 55echoes bbva· no DNS
brand spelled with digits “ae888v4→bbva”brand plus digits “ae888v4”TLD with a high abuse rate “cam”brand name behind Cloudflare “cloudflare.com”

Model opinion: suspicious (target: bbva), confidence 40%. An opinion, not a finding.

Highairbnb-neighbour-help.comscore 55echoes airbnb
brand in the name “airbnb”lure words (login, verify, secure…) “help”

Model opinion: suspicious (target: airbnb), confidence 84%. An opinion, not a finding.

Highalkestfvshopify.storescore 55echoes shopify· other
brand in the name “shopify”brand name at a retail registrar “Namify Domains Inc”brand in page title, not in the name “cloudflare”

Model opinion: looks like abuse (target: Shopify), confidence 55%. An opinion, not a finding.

Highallonbinance.topscore 55echoes binance· boilerplate page
brand in the name “binance”TLD with a high abuse rate “top”brand name at a retail registrar “NameMart Pte. Ltd.”identical page on many newborns “102 identical pages”

Model opinion: looks like abuse (target: Binance), confidence 72%. An opinion, not a finding.

Highamazon-help.onlinescore 55echoes amazon· registrar placeholder
brand in the name “amazon”lure words (login, verify, secure…) “help”identical page on many newborns “3510 identical pages”

Model opinion: looks like abuse (target: Amazon), confidence 80%. An opinion, not a finding.

Highamazonprintingservices.comscore 55echoes amazon
brand in the name “amazon”lure words (login, verify, secure…) “service,services”brand name on a rarely-seen nameserver “myukcloud.com”

Model opinion: suspicious (target: amazon), confidence 71%. An opinion, not a finding.

Highbankofamericadesksupport.comscore 55echoes bankofamerica
brand in the name “bankofamerica”lure words (login, verify, secure…) “support”brand name behind Cloudflare “cloudflare.com”
Highbansos88google.comscore 55echoes google
brand in the name “google”brand plus digits “bansos88google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Highbersama4d-mobile.comscore 55echoes tmobile
one-letter brand typo “mobile≈tmobile”brand plus digits “bersama4d-mobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Highbetsy.workscore 55echoes etsy· boilerplate page
brand in the name “etsy”TLD with a high abuse rate “work”brand name at a retail registrar “Porkbun”brand name at a watch-list registrar “Porkbun”+1 more

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Highbigbos99-mobile.casascore 55echoes tmobile· other
one-letter brand typo “mobile≈tmobile”brand plus digits “bigbos99-mobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+2 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highbigbos99-mobile.cyouscore 55echoes tmobile· not probed yet
one-letter brand typo “mobile≈tmobile”brand plus digits “bigbos99-mobile”TLD with a high abuse rate “cyou”brand name behind Cloudflare “cloudflare.com”+2 more
Highbigbos99-mobile.spacescore 55echoes tmobile· other
one-letter brand typo “mobile≈tmobile”brand plus digits “bigbos99-mobile”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “cloudflare”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highbigbos99-mobile.websitescore 55echoes tmobile· other
one-letter brand typo “mobile≈tmobile”brand plus digits “bigbos99-mobile”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “cloudflare”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highbillingslinkedin.comscore 55echoes linkedin
brand in the name “linkedin”lure words (login, verify, secure…) “billing”brand name behind Cloudflare “cloudflare.com”
Highbinancegm.orgscore 55echoes binance· blocked the probe
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “cloudflare”
Highbooking-login.cfdscore 55echoes booking· no web server
brand in the name “booking”lure words (login, verify, secure…) “login”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”
Highbos88-mobile.comscore 55echoes tmobile· no web server
one-letter brand typo “mobile≈tmobile”brand plus digits “bos88-mobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Highbybitit.comscore 55echoes bybit· redirects elsewhere
brand in the name “bybit”form on a brand-styled page “has_form”brand name redirects elsewhere “timeweb.ru”

Model opinion: looks like abuse (target: Bybit), confidence 72%. An opinion, not a finding.

Highc06cv-aa4p0f-auth-gateway-cloud-fr.comscore 55echoes icloud· blocked the probe
one-letter brand typo “cloud≈icloud”lure words (login, verify, secure…) “auth”many hyphens “5”very long name “34”+3 more
Highcanadapost-resetyourdeliverynow.infoscore 55echoes canadapost· boilerplate page
brand in the name “canadapost”lure words (login, verify, secure…) “delivery,reset”very long name “31”

Model opinion: looks like abuse (target: Canada Post), confidence 85%. An opinion, not a finding.

Highchatgptapi.appscore 55echoes chatgpt· empty page
brand in the name “chatgpt”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “CloudFlare, Inc.”brand name and brand-styled page “chatgpt”

Model opinion: looks like abuse (target: OpenAI), confidence 70%. An opinion, not a finding.

Highchatgptbot.workscore 55echoes chatgpt· robots.txt denied
brand in the name “chatgpt”TLD with a high abuse rate “work”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”+1 more
Highcheck-trustwallet.onlinescore 55echoes trustwallet· not probed yet
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”
Highcircuspsychos.artscore 55echoes usps· redirects elsewhere
brand in the name “usps”brand in page title, not in the name “facebook”form on a brand-styled page “has_form”brand name redirects elsewhere “linktr.ee”

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Highclaims-dopplerfinance.cfdscore 55· blocked the probe
lure words (login, verify, secure…) “claim,claims”TLD with a high abuse rate “cfd”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highclaims-dopplerfinance.cyouscore 55· blocked the probe
lure words (login, verify, secure…) “claim,claims”TLD with a high abuse rate “cyou”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highcoinbase-wallet.proscore 55echoes coinbase· no DNS
brand in the name “coinbase”lure words (login, verify, secure…) “wallet”
Highcoinbase-wallets.orgscore 55echoes coinbase· robots.txt denied
brand in the name “coinbase”lure words (login, verify, secure…) “wallet”
Highdaxian-us-cucuang-tiktok.xyzscore 55echoes tiktok· no DNS
brand in the name “tiktok”many hyphens “3”TLD with a high abuse rate “xyz”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”+1 more
Highdeny-apple-id.comscore 55echoes apple
brand in the name “apple”lure words (login, verify, secure…) “id”brand name behind Cloudflare “cloudflare.com”
Highdigital-worklife-alight-deutschbank-four.comscore 55echoes deutschebank
one-letter brand typo “deutschbank≈deutschebank”many hyphens “4”very long name “40”brand name behind Cloudflare “cloudflare.com”+2 more
Highe75yb9f6.topscore 55echoes etsy· not probed yet
brand spelled with digits “e75yb9f6→etsy”brand plus digits “e75yb9f6”TLD with a high abuse rate “top”brand name at a retail registrar “Dominet (HK) Limited”
Highebaydealertraining.comscore 55echoes ebay
brand in the name “ebay”lure words (login, verify, secure…) “alert”
Highfacebook-contact-security.comscore 55echoes facebook
brand in the name “facebook”lure words (login, verify, secure…) “security”brand name behind Cloudflare “cloudflare.com”
Highfacebook-security-blud.comscore 55echoes facebook
brand in the name “facebook”lure words (login, verify, secure…) “security”brand name behind Cloudflare “cloudflare.com”
Highfacebook-security-bludpage.comscore 55echoes facebook
brand in the name “facebook”lure words (login, verify, secure…) “security”brand name behind Cloudflare “cloudflare.com”
Highfacebook-security-bludtick.comscore 55echoes facebook
brand in the name “facebook”lure words (login, verify, secure…) “security”brand name behind Cloudflare “cloudflare.com”
Highfacebook-security-contact.comscore 55echoes facebook
brand in the name “facebook”lure words (login, verify, secure…) “security”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highfacebook-security-fanpage.comscore 55echoes facebook
brand in the name “facebook”lure words (login, verify, secure…) “security”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highfacebook-security-helppage.comscore 55echoes facebook
brand in the name “facebook”lure words (login, verify, secure…) “security”brand name behind Cloudflare “cloudflare.com”
Highfacebook-security-helps.comscore 55echoes facebook
brand in the name “facebook”lure words (login, verify, secure…) “security”brand name behind Cloudflare “cloudflare.com”
Highfacebook-security-home.comscore 55echoes facebook
brand in the name “facebook”lure words (login, verify, secure…) “security”brand name behind Cloudflare “cloudflare.com”
Highfacebook-security-pagde.comscore 55echoes facebook
brand in the name “facebook”lure words (login, verify, secure…) “security”brand name behind Cloudflare “cloudflare.com”

Same data as JSON: /api/zone/risk?day=2026-10-17&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.