Flagged newborn domains, Wednesday, October 21, 2026

16,563 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Hightiktokslot88b.vipscore 55echoes tiktok· not probed yet
brand in the name “tiktok”brand plus digits “tiktokslot88b”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun”+1 more

Model opinion: looks like abuse (target: TikTok), confidence 70%. An opinion, not a finding.

Hightlktok-l.inkscore 55echoes tiktok· redirects elsewhere
one-letter brand typo “tlktok≈tiktok”brand in page title, not in the name “google”form on a brand-styled page “has_form”brand name redirects elsewhere “google.com”

Model opinion: looks like abuse (target: TikTok), confidence 77%. An opinion, not a finding.

Hightrezor-v2.inkscore 55echoes trezor· redirects elsewhere
brand in the name “trezor”brand plus digits “trezor-v2”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “trezor”+1 more

Model opinion: looks like abuse (target: Trezor), confidence 70%. An opinion, not a finding.

Hightrustwallet-portal.comscore 55echoes trustwallet
brand in the name “trustwallet”lure words (login, verify, secure…) “portal,wallet”

Model opinion: suspicious (target: trustwallet), confidence 84%. An opinion, not a finding.

Hightrustwalletcrypto.orgscore 55echoes trustwallet· no DNS
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”brand name behind Cloudflare “cloudflare.com”

Model opinion: suspicious (target: trustwallet), confidence 44%. An opinion, not a finding.

Highuniswapjdreamxp.motorcyclesscore 55echoes uniswap· no DNS
brand in the name “uniswap”TLD with a high abuse rate “motorcycles”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”+1 more

Model opinion: suspicious, confidence 46%. An opinion, not a finding.

Highus02web-zoom-us.onlinescore 55echoes zoom· redirect not followed
brand in the name “zoom”brand plus digits “us02web-zoom-us”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”+2 more

Model opinion: looks like abuse (target: Zoom), confidence 93%. An opinion, not a finding.

Highus02web-zoom.onlinescore 55echoes zoom· redirect not followed
brand in the name “zoom”brand plus digits “us02web-zoom”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”+2 more

Model opinion: looks like abuse (target: Zoom), confidence 93%. An opinion, not a finding.

Highusaaclaims.camscore 55echoes usaa· no DNS
brand in the name “usaa”lure words (login, verify, secure…) “claim,claims”TLD with a high abuse rate “cam”

Model opinion: suspicious (target: usaa), confidence 63%. An opinion, not a finding.

Highvanguardintegratedservices.comscore 55echoes vanguard
brand in the name “vanguard”lure words (login, verify, secure…) “service,services”

Model opinion: suspicious (target: Vanguard), confidence 60%. An opinion, not a finding.

Highverizonupdates.comscore 55echoes verizon
brand in the name “verizon”lure words (login, verify, secure…) “update”

Model opinion: suspicious (target: verizon), confidence 92%. An opinion, not a finding.

Highwalletdisconnect-coinbase.comscore 55echoes coinbase
brand in the name “coinbase”lure words (login, verify, secure…) “wallet”brand name behind Cloudflare “cloudflare.com”

Model opinion: suspicious (target: coinbase), confidence 90%. An opinion, not a finding.

Highwhatsapp-id.comscore 55echoes whatsapp· empty page
brand in the name “whatsapp”lure words (login, verify, secure…) “id”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks like abuse (target: WhatsApp), confidence 80%. An opinion, not a finding.

Highwordpresssecurity.proscore 55echoes wordpress· registrar placeholder
brand in the name “wordpress”lure words (login, verify, secure…) “security”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more

Model opinion: looks benign, confidence 59%. An opinion, not a finding.

Highzelle-customercare-inq.comscore 55echoes zelle
brand in the name “zelle”lure words (login, verify, secure…) “customer”brand name at a retail registrar “Tucows Domains Inc.”

Model opinion: suspicious (target: zelle), confidence 81%. An opinion, not a finding.

Highamazonas.newsscore 54echoes amazon· active website
brand in the name “amazon”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Highapple-h5.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-h5”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”

Model opinion: suspicious (target: Apple), confidence 72%. An opinion, not a finding.

Highapple-k2.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-k2”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”

Model opinion: suspicious (target: apple), confidence 41%. An opinion, not a finding.

Highapple-p2.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-p2”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”

Model opinion: suspicious (target: Apple), confidence 72%. An opinion, not a finding.

Highbellasprofessionalcleaningservices.comscore 54· redirects elsewhere
lure words (login, verify, secure…) “service,services”very long name “34”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Highbestfitautoaccessories.comscore 54echoes itau
brand in the name “itau”lure words (login, verify, secure…) “access”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”

Model opinion: suspicious, confidence 48%. An opinion, not a finding.

Highchatgptdutch.orgscore 54echoes chatgpt· registrar placeholder
brand in the name “chatgpt”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “4103 identical pages”

Model opinion: looks benign, confidence 64%. An opinion, not a finding.

Highcloud.kaufenscore 54echoes icloud· redirects elsewhere
one-letter brand typo “cloud≈icloud”form on a brand-styled page “has_form”brand name redirects elsewhere “domaincostclub.com”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highcolet-rapid.clickscore 54· redirects elsewhere
TLD with a high abuse rate “click”free DNS provider “dnsowl.com”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 62%. An opinion, not a finding.

Highgoldcoastmobileboatservice.comscore 54echoes tmobile
brand in the name “tmobile”lure words (login, verify, secure…) “service”brand name on a rarely-seen nameserver “netregistry.net”brand name at a retail registrar “Netregistry Wholesale Pty Ltd”

Model opinion: suspicious, confidence 47%. An opinion, not a finding.

Highheilshebay.wikiscore 54echoes ebay· active website
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Highid-icloudsite.comscore 54echoes icloud
brand in the name “icloud”lure words (login, verify, secure…) “id”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gransy, s.r.o.”

Model opinion: suspicious (target: icloud), confidence 75%. An opinion, not a finding.

Highknucklebay.shopscore 54echoes ebay· boilerplate page
brand in the name “ebay”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”identical page on many newborns “1826 identical pages”

Model opinion: looks benign, confidence 66%. An opinion, not a finding.

Highmimi-mobile.websitescore 54echoes tmobile· active website
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Name.com, Inc.”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 58%. An opinion, not a finding.

Highmycostcorewards0100.comscore 54echoes costco
brand in the name “costco”lure words (login, verify, secure…) “reward,rewards”brand plus digits “mycostcorewards0100”

Model opinion: suspicious (target: costco), confidence 70%. An opinion, not a finding.

Highmyuspssupport.comscore 54echoes usps· no DNS
brand in the name “usps”lure words (login, verify, secure…) “support”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”

Model opinion: suspicious (target: usps), confidence 66%. An opinion, not a finding.

Highnintendo-switch-sports-resort-wiki.wikiscore 54echoes nintendo· not probed yet
brand in the name “nintendo”many hyphens “4”very long name “34”brand name at a retail registrar “Spaceship, Inc.”+1 more

Model opinion: suspicious (target: Nintendo), confidence 65%. An opinion, not a finding.

Highonthebaytreeservice.comscore 54echoes ebay
brand in the name “ebay”lure words (login, verify, secure…) “service”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”

Model opinion: suspicious, confidence 68%. An opinion, not a finding.

Highrc-cloud.appscore 54echoes icloud· active website
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Squarespace Domains II LLC.”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Highservicebaystudio.comscore 54echoes ebay
brand in the name “ebay”lure words (login, verify, secure…) “service”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”

Model opinion: suspicious (target: ebay), confidence 64%. An opinion, not a finding.

Highslackassot.homesscore 54echoes slack· boilerplate page
brand in the name “slack”TLD with a high abuse rate “homes”brand name behind Cloudflare “cloudflare.com”identical page on many newborns “74 identical pages”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Hightavrida-finance.onlinescore 54echoes binance· boilerplate page
one-letter brand typo “finance≈binance”brand name at a retail registrar “Regional Network Information Center, JSC”identical page on many newborns “33 identical pages”brand name redirects elsewhere “tavrida-finance.ru”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highxboxgaoqingshipinxianguankan.babyscore 54echoes xbox· blocked the probe
brand in the name “xbox”very long name “28”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more

Model opinion: suspicious (target: Xbox), confidence 72%. An opinion, not a finding.

Highxboxmianfeigaoqingrijuziyuan.babyscore 54echoes xbox· not probed yet
brand in the name “xbox”very long name “28”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highxn--rtwal-8ra00dung2craj.comscore 54echoes trustwallet· no web server
punycode name “țrųștwaļlèț scripts=LATIN”brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”

Model opinion: looks like abuse (target: Trust Wallet), confidence 80%. An opinion, not a finding.

Highbkafricaonedrive.orgscore 53echoes onedrive· empty page
brand in the name “onedrive”brand name at a retail registrar “Tucows Domains Inc.”brand name and brand-styled page “onedrive”

Model opinion: looks benign, confidence 74%. An opinion, not a finding.

Highhapptelegram.wikiscore 53echoes telegram· active website
brand in the name “telegram”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”brand name and brand-styled page “telegram”

Model opinion: looks like abuse, confidence 55%. An opinion, not a finding.

Highlinkedinresumebuilder.appscore 53echoes linkedin· active website
brand in the name “linkedin”brand name at a retail registrar “Name.com, Inc.”brand name and brand-styled page “linkedin”

Model opinion: looks like abuse (target: LinkedIn), confidence 60%. An opinion, not a finding.

Highpanicatthecostco.bandscore 53echoes costco· active website
brand in the name “costco”brand name at a retail registrar “eNom, LLC”brand name and brand-styled page “costco”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Hightiktokpl.shopscore 53echoes tiktok· active website
brand in the name “tiktok”brand name at a retail registrar “West263 International Limited”brand name and brand-styled page “tiktok”

Model opinion: looks like phishing (target: TikTok), confidence 85%. An opinion, not a finding.

Hightiktoksaver.appscore 53echoes tiktok· parked, for sale
brand in the name “tiktok”brand name at a retail registrar “Name.com, Inc.”brand name and brand-styled page “tiktok”

Model opinion: looks like abuse (target: TikTok), confidence 70%. An opinion, not a finding.

Highvanguard-systems.infoscore 53echoes vanguard· active website
brand in the name “vanguard”brand name at a retail registrar “Ligne Web Services SAS dba LWS”brand name and brand-styled page “vanguard”

Model opinion: looks benign, confidence 77%. An opinion, not a finding.

Highwhatsappai.camscore 53echoes whatsapp· empty page
brand in the name “whatsapp”TLD with a high abuse rate “cam”brand name and brand-styled page “whatsapp”

Model opinion: looks like abuse (target: WhatsApp), confidence 77%. An opinion, not a finding.

High404903binance.comscore 52echoes binance
brand in the name “binance”brand plus digits “404903binance”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: suspicious (target: binance), confidence 78%. An opinion, not a finding.

High4g-apple.comscore 52echoes apple
brand in the name “apple”brand plus digits “4g-apple”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “TuringSign Inc. d/b/a Cosmotown”

Model opinion: suspicious (target: apple), confidence 70%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-21&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.