Flagged newborn domains, Monday, October 19, 2026

572 names at tier high or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highheyfidelity.comscore 50echoes fidelity· active website
brand in the name “fidelity”brand in page title, not in the name “apple”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Highhuluandeshenjianjun.babyscore 50echoes hulu· not probed yet
brand in the name “hulu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highiclouderz.comscore 50echoes icloud
brand in the name “icloud”brand name on a rarely-seen nameserver “iclouderz.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highinstruct-gmail.comscore 50echoes gmail
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highios-mobile.clickscore 50echoes tmobile· boilerplate page
one-letter brand typo “mobile≈tmobile”TLD with a high abuse rate “click”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highkm-store.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Highkontraroblox.wikiscore 50echoes roblox· not probed yet
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highkuaimao798.cyouscore 50· active website
TLD with a high abuse rate “cyou”page impersonates a brand “Netflix”brand in page title, not in the name “phantom”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highmy-icloud.infoscore 50echoes icloud· robots.txt denied
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highopenairdocs.comscore 50echoes openai
brand in the name “openai”brand name on a rarely-seen nameserver “awsdns-53.org”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highopenairdocs.orgscore 50echoes openai· no DNS
brand in the name “openai”brand name on a rarely-seen nameserver “awsdns-30.org”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highpitchvanguard.onlinescore 50echoes vanguard· not probed yet
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highportal-loginsegurosuper.sitescore 50· blocked the probe
lure words (login, verify, secure…) “login,portal”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highprimrosebay.worldscore 50echoes ebay· server error
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”

Model opinion: unreachable when judged, confidence 95%. An opinion, not a finding.

Highpumppal.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: suspicious (target: PayPal), confidence 72%. An opinion, not a finding.

Highrevolutionarybostonstore.comscore 50echoes revolut
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highrextracking.shopscore 50· redirects elsewhere
lure words (login, verify, secure…) “track,tracking”brand in page title, not in the name “amazon”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 41%. An opinion, not a finding.

Highrobloxbasketballzero.wikiscore 50echoes roblox· not probed yet
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highrobloxvolleyballlegends.wikiscore 50echoes roblox· not probed yet
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highsafe-coinbase.comscore 50echoes coinbase
brand in the name “coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highshopeepatenjitu.comscore 50echoes shopee
brand in the name “shopee”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highstatus-coinbase.comscore 50echoes coinbase
brand in the name “coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highstripewake.comscore 50echoes stripe
brand in the name “stripe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Hightanyastiktokfinds.comscore 50echoes tiktok· registrar placeholder
brand in the name “tiktok”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “76 identical pages”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Hightaobao-vnt.comscore 50echoes taobao
brand in the name “taobao”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Hightaobaovnt.comscore 50echoes taobao
brand in the name “taobao”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Hightapsimulatorreborn-roblox.wikiscore 50echoes roblox· not probed yet
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Hightiktok-visualizza-profilo.comscore 50echoes tiktok
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Hightongmail.comscore 50echoes gmail
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
Highuk-barclays.comscore 50echoes barclays
brand in the name “barclays”brand name on a rarely-seen nameserver “flokinet.net”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highvanguardcache.comscore 50echoes vanguard· not probed yet
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highvoicesofthevanguard.comscore 50echoes vanguard
brand in the name “vanguard”brand name on a rarely-seen nameserver “sitezoogle.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highw-robinhood.comscore 50echoes robinhood
brand in the name “robinhood”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highwhatapp-kr.comscore 50echoes whatsapp
one-letter brand typo “whatapp≈whatsapp”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highwhtsapp-my.comscore 50echoes whatsapp
one-letter brand typo “whtsapp≈whatsapp”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highzentiquebay.storescore 50echoes ebay· not probed yet
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highzeusaa.worldscore 50echoes usaa· active website
brand in the name “usaa”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: looks like abuse, confidence 93%. An opinion, not a finding.

High121893coinbase.comscore 49echoes coinbase
brand in the name “coinbase”brand plus digits “121893coinbase”random-looking name “H=3.66”brand name behind Cloudflare “cloudflare.com”
High9mail.techscore 49echoes gmail· no DNS
brand spelled with digits “9mail→gmail”brand plus digits “9mail”brand name behind Cloudflare “cloudflare.com”
Highfaceb00k-pruebas.comscore 49echoes facebook
brand spelled with digits “faceb00k-pruebas→facebook”brand plus digits “faceb00k-pruebas”brand name on a rarely-seen nameserver “hospedajeydominios.com”
Highpaypa1-pruebas.comscore 49echoes paypal
brand spelled with digits “paypa1-pruebas→paypal”brand plus digits “paypa1-pruebas”brand name on a rarely-seen nameserver “hospedajeydominios.com”
Highrajalangit77mobile.comscore 49echoes tmobile
brand spelled with digits “rajalangit77mobile→tmobile”brand plus digits “rajalangit77mobile”brand name behind Cloudflare “cloudflare.com”
Highairhead-finance.comscore 48echoes binance
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highamazoniatechnology.comscore 48echoes amazon· boilerplate page
brand in the name “amazon”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “273 identical pages”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highfi-search-q-ether-chrome-bb-ie-utf-8.exchangescore 48· redirects elsewhere
many hyphens “8”very long name “36”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highfirelight-finance-coin.comscore 48echoes binance
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highhouseholdamazon.storescore 48echoes amazon· boilerplate page
brand in the name “amazon”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “1384 identical pages”

Model opinion: looks like abuse (target: Amazon), confidence 58%. An opinion, not a finding.

Highlcloud-idms.livescore 48echoes icloud· boilerplate page
one-letter brand typo “lcloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”

Model opinion: looks like abuse (target: Apple), confidence 85%. An opinion, not a finding.

Highlost-cloud-telef.clubscore 48echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highmeet-google-invite.chatscore 48echoes google· boilerplate page
brand in the name “google”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “2625 identical pages”

Model opinion: looks like abuse (target: Google), confidence 80%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-19&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.