Flagged newborn domains, Tuesday, October 27, 2026

737 names at tier high or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highroblos.topscore 50echoes roblox· no web server
one-letter brand typo “roblos≈roblox”TLD with a high abuse rate “top”brand name at a retail registrar “Dynadot LLC”brand name at a watch-list registrar “Dynadot LLC”
Highroworldroblox.wikiscore 50echoes roblox· not probed yet
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Hightaxiyield.lolscore 50· active website
TLD with a high abuse rate “lol”page impersonates a brand “MetaMask”brand in page title, not in the name “robinhood”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highusesigi.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Coinbase”brand in page title, not in the name “robinhood”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highuspsdxt.infoscore 50echoes usps· boilerplate page
brand in the name “usps”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks like abuse (target: USPS), confidence 77%. An opinion, not a finding.

Highvanguardpulsedigital.comscore 50echoes vanguard
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highvenmora.vipscore 50echoes venmo· not probed yet
brand in the name “venmo”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highxboxgaoqingshipinxiane.babyscore 50echoes xbox· not probed yet
brand in the name “xbox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highyoutunice.homesscore 50· active website
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highyutashop.sitescore 50· active website
page asks for credentials “confirm your payment”brand in page title, not in the name “roblox”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Higharumex.comscore 48echoes aramex
one-letter brand typo “arumex≈aramex”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highatb-com.comscore 48echoes attcom
one-letter brand typo “atbcom≈attcom”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highbaxbox.infoscore 48echoes xbox· parked with ads
brand in the name “xbox”brand name at a retail registrar “IONOS SE”identical page on many newborns “82 identical pages”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highbaxbox.onlinescore 48echoes xbox· parked with ads
brand in the name “xbox”brand name at a retail registrar “IONOS SE”identical page on many newborns “82 identical pages”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highbinancezk.comscore 48echoes binance· boilerplate page
brand in the name “binance”brand name at a retail registrar “YouDamain.com LLC”identical page on many newborns “605 identical pages”

Model opinion: looks like abuse (target: Binance), confidence 70%. An opinion, not a finding.

Highcloud-brook.onlinescore 48echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highcloud-heron.onlinescore 48echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highcloud-reef.onlinescore 48echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highcloud-trails.onlinescore 48echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highcoke-cloud.latscore 48echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highfd-postback.onlinescore 48echoes postbank· not probed yet
one-letter brand typo “postback≈postbank”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highfidelityrealtycompany.onlinescore 48echoes fidelity· boilerplate page
brand in the name “fidelity”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “2327 identical pages”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highfidelityrealtygroupusa.storescore 48echoes fidelity· boilerplate page
brand in the name “fidelity”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “2327 identical pages”

Model opinion: looks benign, confidence 77%. An opinion, not a finding.

Highfortunebay.golfscore 48echoes ebay· boilerplate page
brand in the name “ebay”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “2327 identical pages”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highfrosty-cloud.comscore 48echoes icloud
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highicloup-content.onlinescore 48echoes icloud· robots.txt denied
one-letter brand typo “icloup≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highlivebydisney.comscore 48echoes disney· boilerplate page
brand in the name “disney”brand name at a retail registrar “Wild West Domains, LLC”identical page on many newborns “605 identical pages”

Model opinion: looks like abuse (target: Disney), confidence 68%. An opinion, not a finding.

Highmedicarex.bestscore 48echoes medicare· not probed yet
one-letter brand typo “medicarex≈medicare”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highmeet-google-invites.chatscore 48echoes google· boilerplate page
brand in the name “google”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “2327 identical pages”

Model opinion: looks like abuse (target: Google), confidence 72%. An opinion, not a finding.

Highmilita-usservice.comscore 48echoes itau
brand in the name “itau”lure words (login, verify, secure…) “service”brand name at a retail registrar “Gransy, s.r.o.”
Highocloud.asiascore 48echoes icloud· no DNS
one-letter brand typo “ocloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Highoffers-dl-mobile-o.comscore 48echoes tmobile
one-letter brand typo “mobile≈tmobile”many hyphens “3”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highsterling-guard-legal.sitescore 48echoes starling· not probed yet
one-letter brand typo “sterling≈starling”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highsupporto-stripeprivati.comscore 48echoes stripe
brand in the name “stripe”lure words (login, verify, secure…) “support”brand name at a retail registrar “Tucows Domains Inc.”
Hightag-cloud.wikiscore 48echoes icloud· active website
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highxn--lea-8ma.onlinescore 48· registrar placeholder
punycode name “leña scripts=LATIN”brand in page title, not in the name “hostinger”identical page on many newborns “58 identical pages”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highyindeeunlock.shopscore 48· active website
lure words (login, verify, secure…) “unlock”page impersonates a brand “Apple ID”brand in page title, not in the name “apple”

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Highyourgmail.infoscore 48echoes gmail· boilerplate page
brand in the name “gmail”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “2327 identical pages”

Model opinion: looks like abuse (target: Google (Gmail)), confidence 70%. An opinion, not a finding.

Highyourpaypalwallet.comscore 48echoes paypal
brand in the name “paypal”lure words (login, verify, secure…) “wallet”brand name at a retail registrar “Register.com - Network Solutions, LLC”
High951835-binance.comscore 46echoes binance
brand in the name “binance”brand plus digits “951835-binance”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Highadradar.clickscore 46· active website
TLD with a high abuse rate “click”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 83%. An opinion, not a finding.

Highaliceinbox.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “facebook”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 70%. An opinion, not a finding.

Highaliza.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highanthropicx1.comscore 46echoes anthropic
brand in the name “anthropic”brand plus digits “anthropicx1”brand name at a retail registrar “GoDaddy.com, LLC”
Highantssquad.funscore 46· active website
TLD with a high abuse rate “fun”brand in page title, not in the name “chase”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highasdesigns.workscore 46· active website
TLD with a high abuse rate “work”brand in page title, not in the name “booking”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highbahramovbahrom2006gmail.comscore 46echoes gmail
brand in the name “gmail”brand plus digits “bahramovbahrom2006gmail”brand name at a retail registrar “Ultahost, Inc.”
Highbetsat1848.camscore 46· blocked the probe
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highbf9iiomnvy54mtv4u127z.cfdscore 46· blocked the probe
TLD with a high abuse rate “cfd”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highbi8b0storage.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-27&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.