Flagged newborn domains, Thursday, October 22, 2026

2,514 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highprogressoutlook.infoscore 50echoes outlook· no DNS
brand in the name “outlook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highprojectoutlook.infoscore 50echoes outlook· no DNS
brand in the name “outlook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highpurplebay.orgscore 50echoes ebay· not probed yet
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highqualityoutlook.infoscore 50echoes outlook· no DNS
brand in the name “outlook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highreachwhitebay.comscore 50echoes ebay
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highrevolutbankfraudreporting.comscore 50echoes revolut
brand in the name “revolut”brand name on a rarely-seen nameserver “nsnamedns.net”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highroblox-executors.comscore 50echoes roblox
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highrochester-ny-tree-service.comscore 50· active website
lure words (login, verify, secure…) “service”many hyphens “3”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highsebastiannetahulu.comscore 50echoes hulu
brand in the name “hulu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highslotvip123-mobile.comscore 50echoes tmobile
one-letter brand typo “mobile≈tmobile”brand plus digits “slotvip123-mobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highstartwhitebay.comscore 50echoes ebay
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highteleshop.topscore 50· active website
TLD with a high abuse rate “top”page impersonates a brand “Netflix”brand in page title, not in the name “telegram”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Hightintuition.sitescore 50echoes intuit· registrar placeholder
brand in the name “intuit”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1560 identical pages”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highusewhitebay.comscore 50echoes ebay
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highvanguardcasino-sk.comscore 50echoes vanguard
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highverizonallforyou.comscore 50echoes verizon
brand in the name “verizon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highviewturbo.momscore 50· active website
TLD with a high abuse rate “mom”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highwellsfargoweb.comscore 50echoes wellsfargo
brand in the name “wellsfargo”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highxiaoha.restscore 50· active website
TLD with a high abuse rate “rest”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 51%. An opinion, not a finding.

Highxingyun.homesscore 50· active website
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “chatgpt”

Model opinion: looks benign, confidence 46%. An opinion, not a finding.

Highxx-yun.sbsscore 50· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highamazoncloud.todayscore 48echoes amazon· boilerplate page
brand in the name “amazon”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “4045 identical pages”

Model opinion: looks like abuse (target: Amazon), confidence 62%. An opinion, not a finding.

Highamazondeals.worldscore 48echoes amazon· boilerplate page
brand in the name “amazon”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “4045 identical pages”

Model opinion: looks like abuse (target: Amazon), confidence 74%. An opinion, not a finding.

Highanthropicbusiness.comscore 48echoes anthropic· boilerplate page
brand in the name “anthropic”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “526 identical pages”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highchatgptinfer.comscore 48echoes chatgpt· boilerplate page
brand in the name “chatgpt”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “526 identical pages”

Model opinion: looks like abuse (target: OpenAI), confidence 60%. An opinion, not a finding.

Highcloud-kita.comscore 48echoes icloud
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highcloud-sync-mx.onlinescore 48echoes icloud· active website
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highdevelopers-gooegle.appscore 48echoes google· boilerplate page
one-letter brand typo “gooegle≈google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”

Model opinion: looks like abuse (target: Google), confidence 80%. An opinion, not a finding.

Highef-finance.comscore 48echoes binance
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highgmailcenter.infoscore 48echoes gmail· boilerplate page
brand in the name “gmail”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “4045 identical pages”

Model opinion: looks like abuse (target: Google (Gmail)), confidence 70%. An opinion, not a finding.

Highgmailfd.comscore 48echoes gmail· boilerplate page
brand in the name “gmail”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “526 identical pages”

Model opinion: looks like abuse (target: Gmail (Google)), confidence 74%. An opinion, not a finding.

Highlunasolutionsai-etsy.storescore 48echoes etsy· boilerplate page
brand in the name “etsy”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “4045 identical pages”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highmeet-google-video.chatscore 48echoes google· boilerplate page
brand in the name “google”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “4045 identical pages”

Model opinion: looks like abuse (target: Google), confidence 72%. An opinion, not a finding.

Highperksonetsy.storescore 48echoes etsy· boilerplate page
brand in the name “etsy”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “4045 identical pages”

Model opinion: looks like abuse (target: Etsy), confidence 60%. An opinion, not a finding.

Highr-finance.proscore 48echoes binance· empty page
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highripplemagicrevolution.orgscore 48echoes revolut· other
brand in the name “revolut”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand in page title, not in the name “cloudflare”

Model opinion: unreachable when judged, confidence 95%. An opinion, not a finding.

Highrob-lox.lifescore 48echoes roblox· active website
brand in the name “roblox”brand name at a retail registrar “Devexpanse Ltd d/b/a Regery.com”brand name at a watch-list registrar “Devexpanse Ltd d/b/a Regery.com”form on a brand-styled page “has_form”+1 more

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highsimba-mobile.asiascore 48echoes tmobile· placeholder page
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highslack.landscore 48echoes slack· parked, for sale
brand in the name “slack”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more

Model opinion: suspicious, confidence 70%. An opinion, not a finding.

Highstrike-coin.storescore 48echoes stripe· not probed yet
one-letter brand typo “strike≈stripe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Hightelegram-smart-notifications.comscore 48echoes telegram
brand in the name “telegram”very long name “28”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highusa-abundance.orgscore 48echoes usaa· parked, for sale
brand in the name “usaa”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “4045 identical pages”

Model opinion: looks benign, confidence 48%. An opinion, not a finding.

Highvdr-verif-proceed-goggle.bizscore 48echoes google· not probed yet
one-letter brand typo “goggle≈google”many hyphens “3”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “CNOBIN INFORMATION TECHNOLOGY LIMITED”
brand in the name “walmart”very long name “37”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highwvw-binace.comscore 48echoes binance
one-letter brand typo “binace≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
High21718909.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

High24h-9393x1.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 40%. An opinion, not a finding.

High26076324.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

High453912-binance.comscore 46echoes binance
brand in the name “binance”brand plus digits “453912-binance”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
High712461246129124.restscore 46· redirects elsewhere
TLD with a high abuse rate “rest”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-22&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.