Flagged newborn domains, Monday, October 19, 2026

998 names at tier low or above in .top, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticaladopenai.topscore 64echoes openai· active website
brand in the name “openai”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “chatgpt”

Model opinion: looks like abuse (target: OpenAI), confidence 72%. An opinion, not a finding.

Criticalmicrosoftsystemserver.topscore 62echoes microsoft· active website
brand in the name “microsoft”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Microsoft), confidence 72%. An opinion, not a finding.

Highapple-8j.topscore 55echoes apple· no web server
brand in the name “apple”brand plus digits “apple-8j”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Highb-cloud.topscore 55echoes icloud· empty page
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo,LLC”+1 more

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highcloubflare.topscore 55echoes cloudflare· blocked the probe
one-letter brand typo “cloubflare≈cloudflare”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “cloudflare”+1 more
Highmicrosoftsharefile.topscore 55echoes microsoft· no DNS
brand in the name “microsoft”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo,LLC”+1 more
Highmicrosoftsharefiles.topscore 55echoes microsoft· no DNS
brand in the name “microsoft”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo,LLC”+1 more
Highraken.topscore 55echoes kraken· not probed yet
one-letter brand typo “raken≈kraken”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo,LLC”+1 more
Highwordpress-template.topscore 55echoes wordpress· robots.txt denied
brand in the name “wordpress”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo,LLC”+1 more
Highapple-8m.topscore 54echoes apple· no DNS
brand in the name “apple”brand plus digits “apple-8m”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-8n.topscore 54echoes apple· no DNS
brand in the name “apple”brand plus digits “apple-8n”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-8p.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-8p”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-8y.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-8y”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highmicrosoftsharefile1.topscore 54echoes microsoft· no DNS
brand in the name “microsoft”brand plus digits “microsoftsharefile1”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Hightuhocai.topscore 52· active website
TLD with a high abuse rate “top”brand in page title, not in the name “chatgpt”form on a brand-styled page “has_form”form submits over plain HTTP “http://www.tuhocai.top/”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

High37syy.topscore 51echoes etsy· blocked the probe
brand spelled with digits “37syy→etsy”brand plus digits “37syy”TLD with a high abuse rate “top”
Highf7wzz0om.topscore 51echoes zoom· active website
brand spelled with digits “f7wzz0om→zoom”brand plus digits “f7wzz0om”TLD with a high abuse rate “top”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

High24h-tte.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 54%. An opinion, not a finding.

Highagplentrer.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highcreateclub.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Telegram), confidence 95%. An opinion, not a finding.

Highcureisraele.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 59%. An opinion, not a finding.

Highdownload-notlon-app.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highlaspistasdebluebo.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 68%. An opinion, not a finding.

Highlucky-group.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 41%. An opinion, not a finding.

Highlv8bhxfh.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highmaishatiiii.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 45%. An opinion, not a finding.

Highnkupteraz.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 47%. An opinion, not a finding.

Highpocketoptionregister.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Pocket Option), confidence 80%. An opinion, not a finding.

Highrt-1981.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 58%. An opinion, not a finding.

Highsafelanding.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “booking”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 41%. An opinion, not a finding.

Highcoinbass.topscore 42echoes coinbase· not probed yet
one-letter brand typo “coinbass≈coinbase”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highgoogl-documentazione.topscore 42echoes google· no web server
one-letter brand typo “googl≈google”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Mediumfidelityapp.topscore 38echoes fidelity· no DNS
brand in the name “fidelity”TLD with a high abuse rate “top”
Mediumfmkcibc.topscore 38echoes cibc· no DNS
brand in the name “cibc”TLD with a high abuse rate “top”
Mediummicrosoft-office.topscore 38echoes microsoft· no DNS
brand in the name “microsoft”TLD with a high abuse rate “top”
Mediumopenaiapi.topscore 38echoes openai· active website
brand in the name “openai”TLD with a high abuse rate “top”
Mediumdafuturo.topscore 36· blocked the probe
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
Mediumesfiha.topscore 36· blocked the probe
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
Mediuml7-amazonia777.topscore 36echoes amazon· empty page
brand in the name “amazon”brand plus digits “l7-amazonia777”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Mediumsmsverify.topscore 34· empty page
lure words (login, verify, secure…) “verify”TLD with a high abuse rate “top”brand in page title, not in the name “google”
Mediumxn--1ct544izea926a.topscore 31· no DNS
punycode name “豪門財富 scripts=CJK”random-looking name “H=3.75”TLD with a high abuse rate “top”
Mediumxn--1jqz27hqwlz3i.topscore 31· boilerplate page
punycode name “豪门秘书 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
Mediumxn--1ts778c9ok9jf.topscore 31· not probed yet
punycode name “胖虎爆奖 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
Mediumxn--26tr7n2p5avzcf8m.topscore 31· active website
punycode name “解忧杂货铺 scripts=CJK”random-looking name “H=3.95”TLD with a high abuse rate “top”
Mediumxn--2gr09s3u4b3uh.topscore 31· no DNS
punycode name “豪門勇少 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
Mediumxn--2gr09s3u4bz6h.topscore 31· not probed yet
punycode name “豪门勇少 scripts=CJK”random-looking name “H=3.91”TLD with a high abuse rate “top”
Mediumxn--2rqt1iomz0b.topscore 31· no DNS
punycode name “使命召喚 scripts=CJK”random-looking name “H=3.70”TLD with a high abuse rate “top”
Mediumxn--3kq5d74zft1a.topscore 31· no DNS
punycode name “事在人為 scripts=CJK”random-looking name “H=3.81”TLD with a high abuse rate “top”
Mediumxn--6kr759cdvw3uh.topscore 31· no DNS
punycode name “豪門江南 scripts=CJK”random-looking name “H=3.91”TLD with a high abuse rate “top”
Mediumxn--6kr759cdvwz6h.topscore 31· boilerplate page
punycode name “豪门江南 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “top”

Same data as JSON: /api/zone/risk?day=2026-10-19&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.