Flagged newborn domains, Saturday, October 24, 2026

2,506 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highbike-universe-roblox.wikiscore 50echoes roblox· not probed yet
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highbrnubank.barscore 50echoes nubank· boilerplate page
brand in the name “nubank”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NAMECHEAP”brand name at a watch-list registrar “NAMECHEAP”

Model opinion: suspicious (target: nubank), confidence 53%. An opinion, not a finding.

Highcaldera-finance.comscore 50echoes binance
one-letter brand typo “finance≈binance”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highcbpusaa.comscore 50echoes usaa
brand in the name “usaa”brand name on a rarely-seen nameserver “controlpanelnet.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highchatclaudedesktop.cfdscore 50· active website
TLD with a high abuse rate “cfd”page impersonates a brand “Microsoft 365”brand in page title, not in the name “anthropic”

Model opinion: looks like abuse (target: Anthropic), confidence 88%. An opinion, not a finding.

Highdage-yun.sbsscore 50· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”brand in page title, not in the name “disney”

Model opinion: looks benign, confidence 59%. An opinion, not a finding.

Highelasticloud.onlinescore 50echoes icloud· no web server
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Higheligible-robinhood.comscore 50echoes robinhood
brand in the name “robinhood”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highexpertmobile.sitescore 50echoes tmobile· active website
brand in the name “tmobile”brand in page title, not in the name “wordpress”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highgetaegiron.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highgmails-google.comscore 50echoes google
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highgoogleplayid.comscore 50echoes google
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highhiveai.funscore 50· active website
TLD with a high abuse rate “fun”page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks like a scam, confidence 68%. An opinion, not a finding.

Highi-cloud-find-com.helpscore 50echoes icloud· robots.txt denied
brand in the name “icloud”many hyphens “3”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highicloud-res.livescore 50echoes icloud· robots.txt denied
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highicloudiforgot.comscore 50echoes icloud
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highinstagramquestions.comscore 50echoes instagram
brand in the name “instagram”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highinvdoc-adobe-exprees.infoscore 50echoes adobe· not probed yet
brand in the name “adobe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highkakaocasino-onl.comscore 50echoes kakao
brand in the name “kakao”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highkakaocasinoonl.comscore 50echoes kakao
brand in the name “kakao”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highkakaocasinoplay.comscore 50echoes kakao
brand in the name “kakao”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highkvoraminteth-recensione-2026.topscore 50· blocked the probe
very long name “28”TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highlakebay.proscore 50echoes ebay· no DNS
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highliveness-binance.comscore 50echoes binance
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highliveness-coinbase.comscore 50echoes coinbase
brand in the name “coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highmerrymenrh.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks like a scam, confidence 75%. An opinion, not a finding.

Highmontrealprintingmailingservice.onlinescore 50echoes gmail· no DNS
brand in the name “gmail”lure words (login, verify, secure…) “service”very long name “30”brand name behind Cloudflare “cloudflare.com”
Highmycuddlebay.comscore 50echoes ebay
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highnamecheapbx.comscore 50echoes namecheap
brand in the name “namecheap”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highnetflax.streamscore 50echoes netflix· no web server
one-letter brand typo “netflax≈netflix”TLD with a high abuse rate “stream”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highon-sharepoint.onlinescore 50echoes sharepoint· not probed yet
brand in the name “sharepoint”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highone-drive-file.comscore 50echoes onedrive
brand in the name “onedrive”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highoutlookstyle.comscore 50echoes outlook
brand in the name “outlook”brand name on a rarely-seen nameserver “exonhost.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highpinebay.proscore 50echoes ebay· no DNS
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highpl2831923731vjz3134zx321134jk21.restscore 50· redirects elsewhere
very long name “31”TLD with a high abuse rate “rest”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highplay-googie.sbsscore 50echoes google· active website
one-letter brand typo “googie≈google”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”

Model opinion: looks like abuse (target: Google Play), confidence 82%. An opinion, not a finding.

Highplaygoogle.onescore 50echoes google· not probed yet
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highplaystationgardening.cloudscore 50echoes playstation· not probed yet
brand in the name “playstation”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NAMECHEAP”brand name at a watch-list registrar “NAMECHEAP”
Highresortvacations.appscore 50· active website
page asks for credentials “Log in to your account”brand in page title, not in the name “booking”

Model opinion: looks benign, confidence 63%. An opinion, not a finding.

Highrevolutioncharging.comscore 50echoes revolut
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highrobinhood-allocation.comscore 50echoes robinhood
brand in the name “robinhood”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highrobinhood-allocations.comscore 50echoes robinhood
brand in the name “robinhood”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highrobinhood-distribution.comscore 50echoes robinhood
brand in the name “robinhood”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highrobinhood-distributions.comscore 50echoes robinhood
brand in the name “robinhood”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highrobloxcopier.comscore 50echoes roblox
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highroblx-world.cyouscore 50echoes roblox· no web server
one-letter brand typo “roblx≈roblox”TLD with a high abuse rate “cyou”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highservicesingelland.appscore 50· redirects elsewhere
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 40%. An opinion, not a finding.

Highshopeeuser.storescore 50echoes shopee· no DNS
brand in the name “shopee”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Highshopifylinknet.bizscore 50echoes shopify· empty page
brand in the name “shopify”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”

Model opinion: suspicious (target: shopify), confidence 40%. An opinion, not a finding.

Highsmbctyh.comscore 50echoes smbc
brand in the name “smbc”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Same data as JSON: /api/zone/risk?day=2026-10-24&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.