Flagged newborn domains, Wednesday, October 21, 2026

991 names at tier high or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highcloud-teh1.funscore 50echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”brand plus digits “cloud-teh1”TLD with a high abuse rate “fun”brand name behind Cloudflare “cloudflare.com”

Model opinion: unreachable when judged, confidence 80%. An opinion, not a finding.

Highcrosstradestarlink.comscore 50echoes starlink· server error
brand in the name “starlink”brand in page title, not in the name “wordpress”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highdarknetflix.comscore 50echoes netflix
brand in the name “netflix”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”

Model opinion: suspicious (target: netflix), confidence 46%. An opinion, not a finding.

Highemiliascleaningservicesllc.comscore 50· active website
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “airbnb”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highfedexhmt.comscore 50echoes fedex
brand in the name “fedex”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”

Model opinion: suspicious (target: fedex), confidence 57%. An opinion, not a finding.

Highfilestripe.comscore 50echoes stripe
brand in the name “stripe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: suspicious (target: stripe), confidence 59%. An opinion, not a finding.

Highfreechatgpt.orgscore 50echoes chatgpt· no DNS
brand in the name “chatgpt”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: suspicious (target: chatgpt), confidence 42%. An opinion, not a finding.

Highgmailci.comscore 50echoes gmail
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”

Model opinion: suspicious (target: gmail), confidence 57%. An opinion, not a finding.

Highgowhitebay.comscore 50echoes ebay
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: suspicious (target: ebay), confidence 46%. An opinion, not a finding.

Highgransino.makeupscore 50· active website
TLD with a high abuse rate “makeup”page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks like abuse, confidence 74%. An opinion, not a finding.

Highhellowhitebay.comscore 50echoes ebay
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: suspicious (target: ebay), confidence 52%. An opinion, not a finding.

Highicloud-stolen.infoscore 50echoes icloud· not probed yet
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”

Model opinion: suspicious (target: icloud), confidence 62%. An opinion, not a finding.

Highifeimaoyun.sbsscore 50· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”brand in page title, not in the name “chatgpt”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highjiuyunjc.topscore 50· active website
TLD with a high abuse rate “top”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highjntradeservices.shopscore 50· active website
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “amazon”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highjoinwhitebay.comscore 50echoes ebay
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: suspicious (target: ebay), confidence 42%. An opinion, not a finding.

Highlazadaapp.storescore 50echoes lazada· other
brand in the name “lazada”brand in page title, not in the name “cloudflare”

Model opinion: looks like abuse (target: Lazada), confidence 70%. An opinion, not a finding.

Highlongmao.momscore 50· active website
TLD with a high abuse rate “mom”page impersonates a brand “Netflix”brand in page title, not in the name “disney”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highmarulicloud.comscore 50echoes icloud
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: suspicious (target: icloud), confidence 62%. An opinion, not a finding.

Highmichael-coinbase.comscore 50echoes coinbase
brand in the name “coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”

Model opinion: suspicious (target: coinbase), confidence 66%. An opinion, not a finding.

Highnicejiasu.homesscore 50· active website
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Highnicejs.homesscore 50· active website
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highpay2free-mobile-ca.netscore 50echoes tmobile
one-letter brand typo “mobile≈tmobile”brand plus digits “pay2free-mobile-ca”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “OwnRegistrar, Inc.”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highpaypalsport.comscore 50echoes paypal
brand in the name “paypal”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: suspicious (target: paypal), confidence 58%. An opinion, not a finding.

Highpaypalsport.orgscore 50echoes paypal· not probed yet
brand in the name “paypal”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: suspicious (target: paypal), confidence 54%. An opinion, not a finding.

Highperdebay.inkscore 50echoes ebay· not probed yet
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: suspicious (target: ebay), confidence 44%. An opinion, not a finding.

Highpixelgurucostcomparison.infoscore 50echoes costco· registrar placeholder
brand in the name “costco”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1755 identical pages”

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Highpixelgurucostcomparison.orgscore 50echoes costco· registrar placeholder
brand in the name “costco”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1755 identical pages”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highpixelgurucostcomparison.storescore 50echoes costco· registrar placeholder
brand in the name “costco”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1755 identical pages”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highprestigespin.homesscore 50· active website
TLD with a high abuse rate “homes”page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Highpriorityusps.comscore 50echoes usps
brand in the name “usps”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”

Model opinion: suspicious (target: usps), confidence 59%. An opinion, not a finding.

Highrevolutionstra.picsscore 50echoes revolut· no DNS
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”

Model opinion: suspicious (target: Revolut), confidence 60%. An opinion, not a finding.

Highroblox-lua.netscore 50echoes roblox
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”

Model opinion: suspicious, confidence 42%. An opinion, not a finding.

Highroflox.camscore 50echoes roblox· boilerplate page
one-letter brand typo “roflox≈roblox”TLD with a high abuse rate “cam”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”

Model opinion: looks like abuse (target: Roblox), confidence 77%. An opinion, not a finding.

Highrofront-roblox.wikiscore 50echoes roblox· not probed yet
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: suspicious, confidence 42%. An opinion, not a finding.

Highsantander-cliente.comscore 50echoes santander
brand in the name “santander”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”

Model opinion: suspicious (target: santander), confidence 72%. An opinion, not a finding.

Highsantander-seguro.onlinescore 50echoes santander· blocked the probe
brand in the name “santander”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: suspicious (target: santander), confidence 45%. An opinion, not a finding.

Highsantanderreportfraud.comscore 50echoes santander
brand in the name “santander”brand name on a rarely-seen nameserver “nsnamedns.net”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”

Model opinion: suspicious (target: santander), confidence 76%. An opinion, not a finding.

Highsantrigoogle.comscore 50echoes google
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: suspicious (target: google), confidence 64%. An opinion, not a finding.

Highscroomsroblox.comscore 50echoes roblox· not probed yet
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: suspicious, confidence 45%. An opinion, not a finding.

Highsettings-binance.comscore 50echoes binance
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”

Model opinion: suspicious (target: binance), confidence 75%. An opinion, not a finding.

Highstardashvpn.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Highstarlinkxe.comscore 50echoes starlink
brand in the name “starlink”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”

Model opinion: suspicious (target: starlink), confidence 54%. An opinion, not a finding.

Highstarlinkzo.orgscore 50echoes starlink· robots.txt denied
brand in the name “starlink”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”

Model opinion: suspicious (target: starlink), confidence 44%. An opinion, not a finding.

Highsterling.cityscore 50echoes starling· parked, for sale
one-letter brand typo “sterling≈starling”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”brand name redirects elsewhere “atom.com”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Highteam-aupost-clients.helpscore 50echoes auspost· robots.txt denied
one-letter brand typo “aupost≈auspost”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”

Model opinion: looks like abuse (target: Australia Post), confidence 72%. An opinion, not a finding.

Hightelegram-me.livescore 50echoes telegram· not probed yet
brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: suspicious (target: telegram), confidence 58%. An opinion, not a finding.

Hightenner.streamscore 50· active website
TLD with a high abuse rate “stream”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Hightiktokscaryhorrorcontest.comscore 50echoes tiktok
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: suspicious, confidence 44%. An opinion, not a finding.

Hightiktoksongfinder.orgscore 50echoes tiktok· not probed yet
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: unreachable when judged, confidence 95%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-21&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.