Flagged newborn domains, Tuesday, November 10, 2026

889 names at tier high or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highapp-revolut.onescore 50echoes revolut· no DNS
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highapp-revolut.onlinescore 50echoes revolut· no DNS
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highauthenticatorapp.cloudscore 50echoes authenticator· empty page
brand in the name “authenticator”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NAMECHEAP”brand name at a watch-list registrar “NAMECHEAP”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highbackcountryservices.orgscore 50· active website
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 87%. An opinion, not a finding.

Highbeibeiyunvpn.homesscore 50· active website
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “tiktok”

Model opinion: looks benign, confidence 63%. An opinion, not a finding.

Highbetflix-168.ltdscore 50echoes netflix· not probed yet
one-letter brand typo “betflix≈netflix”brand plus digits “betflix-168”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
Highbinancesync.comscore 50echoes binance
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highblazingmechavanguard.livescore 50echoes vanguard· robots.txt denied
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highblind.hairscore 50· active website
TLD with a high abuse rate “hair”page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks like a scam, confidence 77%. An opinion, not a finding.

Highbradesconetempresaspj.comscore 50echoes bradesco
brand in the name “bradesco”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highbybit-compliance.orgscore 50echoes bybit· no DNS
brand in the name “bybit”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highcashclip.funscore 50· active website
TLD with a high abuse rate “fun”page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highconsentsendgrid.comscore 50echoes sendgrid
brand in the name “sendgrid”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highdisneymerchandise.comscore 50echoes disney
brand in the name “disney”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highdocusignsapps.onlinescore 50echoes docusign· no DNS
brand in the name “docusign”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highdownloadroblox.gamesscore 50echoes roblox· not probed yet
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highes-commercial-bbva.comscore 50echoes bbva
brand in the name “bbva”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highfaithsbc.orgscore 50echoes hsbc· no DNS
brand in the name “hsbc”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highfidelitysolutions.bizscore 50echoes fidelity· no web server
brand in the name “fidelity”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highgmailrcn.comscore 50echoes gmail
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highgoogleconnectskc.comscore 50echoes google
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highholidayservices.websitescore 50· server error
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “booking”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 65%. An opinion, not a finding.

Highihservices.orgscore 50· active website
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “airbnb”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 81%. An opinion, not a finding.

Highinquiries-binance.orgscore 50echoes binance· no DNS
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highinquiries-coinbase.helpscore 50echoes coinbase· no DNS
brand in the name “coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highirestore.clickscore 50· active website
TLD with a high abuse rate “click”page impersonates a brand “Apple ID”brand in page title, not in the name “apple”

Model opinion: looks like phishing (target: Apple), confidence 82%. An opinion, not a finding.

Highjichangtuijian.monsterscore 50· active website
TLD with a high abuse rate “monster”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highjing-yun.homesscore 50· active website
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “disney”

Model opinion: looks benign, confidence 65%. An opinion, not a finding.

Highjulangyun.momscore 50· active website
TLD with a high abuse rate “mom”page impersonates a brand “Netflix”brand in page title, not in the name “tiktok”

Model opinion: looks benign, confidence 45%. An opinion, not a finding.

Highjulangyun.sbsscore 50· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”brand in page title, not in the name “disney”

Model opinion: looks benign, confidence 40%. An opinion, not a finding.

Highkhachignamecheap.onlinescore 50echoes namecheap· no DNS
brand in the name “namecheap”brand name on a rarely-seen nameserver “digicertdns.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highkraken-clientservices.comscore 50echoes kraken
ambiguous brand word “kraken”lure words (login, verify, secure…) “service,services”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highlinkedinpremium.netscore 50echoes linkedin· no DNS
brand in the name “linkedin”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
Highlupax.cyouscore 50· active website
TLD with a high abuse rate “cyou”page impersonates a brand “PayPal”brand in page title, not in the name “chatgpt”

Model opinion: looks like a scam (target: OpenAI), confidence 90%. An opinion, not a finding.

Highmariavassilikouicloud.comscore 50echoes icloud
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highmicrosoftmails.comscore 50echoes microsoft
brand in the name “microsoft”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highmobile-auth026.comscore 50echoes tmobile
one-letter brand typo “mobile≈tmobile”brand plus digits “mobile-auth026”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highmontrastocks.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “MetaMask”brand in page title, not in the name “metamask”

Model opinion: suspicious (target: MetaMask), confidence 72%. An opinion, not a finding.

Highnaramozelle.comscore 50echoes zelle
brand in the name “zelle”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highnauticaloutlook.comscore 50echoes outlook
brand in the name “outlook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highonestopservices.websitescore 50· active website
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “uber”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highpacoterenovar-filmes.topscore 50· active website
TLD with a high abuse rate “top”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks like phishing (target: Netflix), confidence 87%. An opinion, not a finding.

Highpay-tax.appscore 50· blocked the probe
lure words (login, verify, secure…) “pay,tax”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highrevolution-onlinecasino.comscore 50echoes revolut
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highrevolutioncasinoie.comscore 50echoes revolut
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highrule-revolut.onlinescore 50echoes revolut· no DNS
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highsantander-finance-de.comscore 50echoes santander
brand in the name “santander”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highsantanderlogistics.sitescore 50echoes santander· not probed yet
brand in the name “santander”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highshibuya-roblox.wikiscore 50echoes roblox· not probed yet
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highshopifycarres.comscore 50echoes shopify
brand in the name “shopify”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”

Same data as JSON: /api/zone/risk?day=2026-11-10&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.