Flagged newborn domains, Tuesday, October 20, 2026

229 names at tier medium or above in .top, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highgoogleadacc.topscore 59echoes google· active website
brand in the name “google”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “google”

Model opinion: looks like abuse (target: Google), confidence 80%. An opinion, not a finding.

Highchatgptsubstitute.topscore 56echoes chatgpt· active website
brand in the name “chatgpt”TLD with a high abuse rate “top”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: OpenAI), confidence 80%. An opinion, not a finding.

Highhelp-whtasapp.topscore 52· blocked the probe
lure words (login, verify, secure…) “help”TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highmyshrddrive-onlinedrive-cloud.topscore 51echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”very long name “29”random-looking name “H=3.63”TLD with a high abuse rate “top”+1 more
Highiosadacc.topscore 50· active website
TLD with a high abuse rate “top”page impersonates a brand “Apple ID”brand in page title, not in the name “apple”

Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.

Highiosadmart.topscore 50· active website
TLD with a high abuse rate “top”page impersonates a brand “Apple ID”brand in page title, not in the name “apple”

Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.

Highiosadsacc.topscore 50· active website
TLD with a high abuse rate “top”page impersonates a brand “Apple ID”brand in page title, not in the name “apple”

Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.

Highiosadstore.topscore 50· active website
TLD with a high abuse rate “top”page impersonates a brand “Apple ID”brand in page title, not in the name “apple”

Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.

Highliyuncloud.topscore 50· active website
TLD with a high abuse rate “top”page impersonates a brand “Netflix”brand in page title, not in the name “chatgpt”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highallocation-jumper.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Higharcondicionado.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 94%. An opinion, not a finding.

Highascdel.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 41%. An opinion, not a finding.

Highfilcupa.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highgermoxo.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highmrjobs.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Highnobleladyreinformation.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 71%. An opinion, not a finding.

Highql-ixx1.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 51%. An opinion, not a finding.

Highsalvepi.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highsalvova.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highsototadawakhana.topscore 46· active website
TLD with a high abuse rate “top”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Hightantabo.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highvollreifenz.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highzalkote.topscore 46· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
High1booking.topscore 44echoes booking· placeholder page
one-letter brand typo “1booking≈booking”brand plus digits “1booking”TLD with a high abuse rate “top”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highamazon-tv-free.topscore 44echoes amazon· blocked the probe
brand in the name “amazon”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highfanyigoogle.topscore 44echoes google· no DNS
brand in the name “google”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highnetflix-pagamentos.topscore 44echoes netflix· no DNS
brand in the name “netflix”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highnuancebay.topscore 44echoes ebay· not probed yet
brand in the name “ebay”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highopenaimining.topscore 44echoes openai· not probed yet
brand in the name “openai”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highcoca-st.topscore 42echoes comcast· no DNS
one-letter brand typo “cocast≈comcast”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Highfinance-profit-bot.topscore 42echoes binance· not probed yet
one-letter brand typo “finance≈binance”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Mediumapp-adobeacrobat.topscore 38echoes adobe· boilerplate page
brand in the name “adobe”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”identical page on many newborns “391 identical pages”
Mediumhanjicloud.topscore 38echoes icloud· no DNS
brand in the name “icloud”TLD with a high abuse rate “top”
Mediumcloud-note.topscore 36echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “top”
Mediumcloud-spotting.topscore 36echoes icloud· active website
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “top”
Mediumwateroinco.topscore 36· other
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
punycode name “哈爾濱石油學院科技創新社團設備預約 scripts=CJK”very long name “57”random-looking name “H=4.67”TLD with a high abuse rate “top”
punycode name “哈尔滨石油学院科技创新社团设备预约 scripts=CJK”very long name “60”random-looking name “H=4.58”TLD with a high abuse rate “top”
Mediumde-kundenportal.topscore 34· blocked the probe
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Mediumportaalvirtual-secure.topscore 34· blocked the probe
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
very long name “52”TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Mediumlist654-voicecalls113-ready684-access.topscore 32· robots.txt denied
lure words (login, verify, secure…) “access”many hyphens “3”very long name “37”TLD with a high abuse rate “top”+1 more
Mediumxn--dd1aq93b.topscore 32· active website
punycode name “雨舟 scripts=CJK”TLD with a high abuse rate “top”form submits over plain HTTP “http://xn--dd1aq93b.top/”
Mediumxn--uisx55jg3b.topscore 32· active website
punycode name “通购城 scripts=CJK”TLD with a high abuse rate “top”form submits over plain HTTP “http://xn--uisx55jg3b.top/”
Mediumxn--30rt8fe8iy6f17jp0xjfa.topscore 31· no DNS
punycode name “太湖縣慈善總會 scripts=CJK”random-looking name “H=3.97”TLD with a high abuse rate “top”
Mediumxn--4kq93i930ak7dtrle83c.topscore 31· blocked the probe
punycode name “二氧化硅炒饭 scripts=CJK”random-looking name “H=4.06”TLD with a high abuse rate “top”
Mediumxn--4kq93i930ak7dtrlsm3c.topscore 31· no DNS
punycode name “二氧化硅炒飯 scripts=CJK”random-looking name “H=4.06”TLD with a high abuse rate “top”
Mediumxn--9kq5rj20b5z6a.topscore 31· redirects elsewhere
punycode name “开云体育 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “top”
Mediumxn--9kqz53jocnx0e.topscore 31· active website
punycode name “開云體育 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
Mediumxn--gmq09hhd868bffp44fww1e.topscore 31· no DNS
punycode name “化州市人民医院 scripts=CJK”random-looking name “H=4.05”TLD with a high abuse rate “top”

Same data as JSON: /api/zone/risk?day=2026-10-20&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.