Flagged newborn domains, Wednesday, October 21, 2026

2,827 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highvanguardlabs.storescore 50echoes vanguard· not probed yet
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: unreachable when judged, confidence 46%. An opinion, not a finding.

Highvanguardoffshorepetroleum.comscore 50echoes vanguard
brand in the name “vanguard”brand name on a rarely-seen nameserver “site4now.net”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: suspicious (target: Vanguard), confidence 65%. An opinion, not a finding.

Highwechatsg.orgscore 50echoes wechat· not probed yet
brand in the name “wechat”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: suspicious, confidence 46%. An opinion, not a finding.

Highwelding-simulator-roblox.wikiscore 50echoes roblox· not probed yet
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: suspicious (target: Roblox), confidence 60%. An opinion, not a finding.

Highweldingsimulatorroblox.wikiscore 50echoes roblox· not probed yet
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: unreachable when judged, confidence 95%. An opinion, not a finding.

Highwellsfargoreview.comscore 50echoes wellsfargo
brand in the name “wellsfargo”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highxboxgaoqingshipinguankan.babyscore 50echoes xbox· not probed yet
brand in the name “xbox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highyeyeyunvpn.homesscore 50· active website
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

High358972coinbase.comscore 49echoes coinbase
brand in the name “coinbase”brand plus digits “358972coinbase”random-looking name “H=3.81”brand name behind Cloudflare “cloudflare.com”
brand in the name “intuit”lure words (login, verify, secure…) “account”very long name “51”random-looking name “H=3.75”
Hightes1a.techscore 49echoes tesla· no DNS
brand spelled with digits “tes1a→tesla”brand plus digits “tes1a”brand name behind Cloudflare “cloudflare.com”
Highbestbuycorner.storescore 48echoes bestbuy· boilerplate page
brand in the name “bestbuy”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “4190 identical pages”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highcachapp.onlinescore 48echoes cashapp· active website
one-letter brand typo “cachapp≈cashapp”brand in page title, not in the name “whatsapp”

Model opinion: looks benign, confidence 65%. An opinion, not a finding.

Highcashappme.orgscore 48echoes cashapp· boilerplate page
brand in the name “cashapp”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “4190 identical pages”

Model opinion: looks like abuse (target: Cash App), confidence 75%. An opinion, not a finding.

Highcashappmebro.orgscore 48echoes cashapp· boilerplate page
brand in the name “cashapp”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “4190 identical pages”

Model opinion: looks like abuse (target: Cash App), confidence 65%. An opinion, not a finding.

Highchatgpthome.comscore 48echoes chatgpt· boilerplate page
brand in the name “chatgpt”identical page on many newborns “177 identical pages”brand name redirects elsewhere “dropcatch.com”

Model opinion: looks like abuse (target: OpenAI), confidence 60%. An opinion, not a finding.

Highcloud-puffin.comscore 48echoes icloud
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highcloud-sable.comscore 48echoes icloud
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highcloud-trail.comscore 48echoes icloud
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highcloud-wren.comscore 48echoes icloud· no web server
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highcockpitau.sitescore 48echoes itau· boilerplate page
brand in the name “itau”brand name at a retail registrar “Synergy Wholesale Accreditations Pty Ltd”identical page on many newborns “273 identical pages”
Highfinance-mo.comscore 48echoes binance
one-letter brand typo “finance≈binance”brand name on a rarely-seen nameserver “olitt.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highgetrecoverly.appscore 48· active website
lure words (login, verify, secure…) “recover”page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highgmailfo.storescore 48echoes gmail· boilerplate page
brand in the name “gmail”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “4190 identical pages”

Model opinion: looks like abuse (target: Google (Gmail)), confidence 70%. An opinion, not a finding.

Highhttpstencstonetsy.storescore 48echoes etsy· boilerplate page
brand in the name “etsy”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “4190 identical pages”

Model opinion: suspicious (target: Etsy), confidence 55%. An opinion, not a finding.

Highhuluandeshenjianjunyuanzhumanhua2.babyscore 48echoes hulu· blocked the probe
brand in the name “hulu”very long name “33”brand plus digits “huluandeshenjianjunyuanzhumanhua2”brand name behind Cloudflare “cloudflare.com”
Highinterwalletsystem.comscore 48echoes etsy
brand in the name “etsy”lure words (login, verify, secure…) “wallet”brand name at a retail registrar “Gransy, s.r.o.”
Highipmpd8-01-myshopify-com.storescore 48echoes shopify· other
brand in the name “shopify”many hyphens “3”brand plus digits “ipmpd8-01-myshopify-com”brand in page title, not in the name “cloudflare”

Model opinion: looks like abuse (target: Shopify), confidence 60%. An opinion, not a finding.

Highlasfitautoaccessories.comscore 48echoes itau
brand in the name “itau”lure words (login, verify, secure…) “access”brand name at a retail registrar “Gransy, s.r.o.”
Highmobile-container.comscore 48echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name on a rarely-seen nameserver “rapidenet.ca”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highnic-cloud.onlinescore 48echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highnintendoswitchsportsresort-wiki.wikiscore 48echoes nintendo· active website
brand in the name “nintendo”very long name “31”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highperfect-cloud.orgscore 48echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highproxy-cloud.comscore 48echoes icloud
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highrobox-home.sitescore 48echoes roblox· not probed yet
one-letter brand typo “robox≈roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
Highsunny-finance.onlinescore 48echoes binance· not probed yet
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highthebaytrack.comscore 48echoes ebay
brand in the name “ebay”lure words (login, verify, secure…) “track”brand name at a retail registrar “GoDaddy.com, LLC”
Highusa-abundance.storescore 48echoes usaa· parked, for sale
brand in the name “usaa”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “4190 identical pages”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Highusaabundance.storescore 48echoes usaa· parked, for sale
brand in the name “usaa”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “4190 identical pages”

Model opinion: looks benign, confidence 86%. An opinion, not a finding.

Highvanguardvibe.onlinescore 48echoes vanguard· boilerplate page
brand in the name “vanguard”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “4190 identical pages”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highvivid-cloud.comscore 48echoes icloud
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highwesternexpworkday.livescore 48echoes workday· boilerplate page
brand in the name “workday”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “4190 identical pages”

Model opinion: looks like abuse (target: Workday), confidence 62%. An opinion, not a finding.

Highxn--gebudereinigung-spritz-und-weg-xsc.comscore 48· active website
punycode name “gebäudereinigung-spritz-und-weg scripts=”many hyphens “3”very long name “31”brand in page title, not in the name “google”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

High2x2peoplestruckinggmail.comscore 46echoes gmail
brand in the name “gmail”brand plus digits “2x2peoplestruckinggmail”brand name at a retail registrar “Wild West Domains, LLC”
High40664443.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

High43055579.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

High51043425.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

High61433729.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

High61944507.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

High83825034.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-21&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.