Flagged newborn domains, Tuesday, November 10, 2026

2,716 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highsingvanguard.shopscore 50echoes vanguard· empty page
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Namecheap, Inc.”brand name at a watch-list registrar “Namecheap, Inc.”

Model opinion: unreachable when judged, confidence 54%. An opinion, not a finding.

Highskylinxjc.homesscore 50· active website
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 65%. An opinion, not a finding.

Highslatebay.onlinescore 50echoes ebay· no DNS
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highstarting.bidscore 50echoes starling· no DNS
one-letter brand typo “starting≈starling”TLD with a high abuse rate “bid”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highstrive.motorcyclesscore 50echoes stripe· active website
one-letter brand typo “strive≈stripe”TLD with a high abuse rate “motorcycles”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highswiftspieleamp.topscore 50· active website
TLD with a high abuse rate “top”page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Hightelegram-premius.comscore 50echoes telegram
brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Hightofu-cloud.xyzscore 50echoes icloud· no web server
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Hightradekit.funscore 50· active website
TLD with a high abuse rate “fun”page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks benign, confidence 54%. An opinion, not a finding.

Hightwittertap.appscore 50echoes twitter· no DNS
brand in the name “twitter”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highusaa-mail-usaa.comscore 50echoes usaa
brand in the name “usaa”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highvinagazelle.comscore 50echoes zelle
brand in the name “zelle”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highwhatsapppcg.comscore 50echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highwherethegold-winspiritau.comscore 50echoes itau
brand in the name “itau”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highshopifyrebellion.racingscore 49echoes shopify· other
brand in the name “shopify”TLD with a high abuse rate “racing”brand name on a rarely-seen nameserver “foundationdns.com”brand's own DNS (reduces score) “blue.foundationdns.com”+1 more

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highag-mobile-oil-change.comscore 48echoes tmobile· not probed yet
one-letter brand typo “mobile≈tmobile”many hyphens “3”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highapexunisolutionsgmail.comscore 48echoes gmail· boilerplate page
brand in the name “gmail”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “457 identical pages”

Model opinion: looks like abuse (target: Gmail), confidence 62%. An opinion, not a finding.

Highapexunisolutionsgmail.infoscore 48echoes gmail· boilerplate page
brand in the name “gmail”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “3315 identical pages”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highaposte-br.orgscore 48echoes laposte· boilerplate page
one-letter brand typo “aposte≈laposte”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highbestbuyz.shopscore 48echoes bestbuy· active website
brand in the name “bestbuy”form on a brand-styled page “has_form”
Highbillirngspotifyrenevv.infoscore 48echoes spotify· blocked the probe
brand in the name “spotify”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”brand in page title, not in the name “cloudflare”
Highbluprintmobile.orgscore 48echoes tmobile· boilerplate page
brand in the name “tmobile”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “66 identical pages”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highbmobile.latscore 48echoes tmobile· no DNS
one-letter brand typo “bmobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highcoloradobehavioralbilling.comscore 48echoes adobe
brand in the name “adobe”lure words (login, verify, secure…) “billing”brand name at a retail registrar “GoDaddy.com, LLC”
Highfurpetsy.infoscore 48echoes etsy· boilerplate page
brand in the name “etsy”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “3315 identical pages”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highfurpetsy.storescore 48echoes etsy· boilerplate page
brand in the name “etsy”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “3315 identical pages”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highgoogle-map-location.livescore 48echoes google· boilerplate page
brand in the name “google”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “3315 identical pages”

Model opinion: looks like abuse (target: Google), confidence 62%. An opinion, not a finding.

Highgooogle-busines.comscore 48echoes google
one-letter brand typo “gooogle≈google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highhostbank.sitescore 48echoes postbank· not probed yet
one-letter brand typo “hostbank≈postbank”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highivandro-cloud.lifescore 48echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highlcloud-co.onlinescore 48echoes icloud· boilerplate page
one-letter brand typo “lcloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: looks like abuse (target: Apple (iCloud)), confidence 80%. An opinion, not a finding.

Highlcloud-located.infoscore 48echoes icloud· empty page
one-letter brand typo “lcloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”

Model opinion: looks like abuse (target: Apple (iCloud)), confidence 80%. An opinion, not a finding.

Highlcloud.helpscore 48echoes icloud· robots.txt denied
one-letter brand typo “lcloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highlittledetailseventstudiogmail.comscore 48echoes gmail
brand in the name “gmail”very long name “29”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highmydev-lcloud-connect.infoscore 48echoes icloud· robots.txt denied
one-letter brand typo “lcloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highofficialtigerking.comscore 48· active website
lure words (login, verify, secure…) “official”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: suspicious, confidence 62%. An opinion, not a finding.

Highondrive.livescore 48echoes onedrive· no web server
one-letter brand typo “ondrive≈onedrive”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highpaypak.cloudscore 48echoes paypal· active website
one-letter brand typo “paypak≈paypal”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”brand name at a watch-list registrar “Dynadot, LLC”

Model opinion: suspicious (target: PayPal), confidence 72%. An opinion, not a finding.

Highprivate-aws-amazon.cloudscore 48echoes amazon· boilerplate page
brand in the name “amazon”brand name at a retail registrar “GoDaddy”identical page on many newborns “3315 identical pages”

Model opinion: looks like abuse (target: Amazon Web Services), confidence 80%. An opinion, not a finding.

Highstarting.agencyscore 48echoes starling· no DNS
one-letter brand typo “starting≈starling”brand name on a rarely-seen nameserver “name-servers.ch”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highsupportamazoncom.infoscore 48echoes amazon· robots.txt denied
brand in the name “amazon”lure words (login, verify, secure…) “support”brand name at a retail registrar “Squarespace Domains II LLC”
Hightik-ook.shopscore 48echoes tiktok· empty page
one-letter brand typo “tikook≈tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Namecheap, Inc.”brand name at a watch-list registrar “Namecheap, Inc.”

Model opinion: looks like abuse (target: TikTok), confidence 72%. An opinion, not a finding.

High17398.clickscore 46· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
High2shoutaobao.comscore 46echoes taobao
brand in the name “taobao”brand plus digits “2shoutaobao”brand name at a retail registrar “DropCatch.com 1748 LLC”
High3aa44r.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 41%. An opinion, not a finding.

High429915.clickscore 46· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
High73190428.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

High783590-binance.comscore 46echoes binance
brand in the name “binance”brand plus digits “783590-binance”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
High8597432.topscore 46· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highairbnb7.comscore 46echoes airbnb
brand in the name “airbnb”brand plus digits “airbnb7”brand name at a retail registrar “Wix.com Ltd.”

Same data as JSON: /api/zone/risk?day=2026-11-10&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.