Flagged newborn domains, Thursday, August 27, 2026
1,232 names at tier high or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “disney”lure words (login, verify, secure…) “update”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “docusign”very long name “28”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”+2 more
brand spelled with digits “dunia777mobile→tmobile”brand plus digits “dunia777mobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
one-letter brand typo “dvidia≈nvidia”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 82%. An opinion, not a finding.
brand spelled with digits “e8ay9→ebay”brand plus digits “e8ay9”TLD with a high abuse rate “top”brand name at a retail registrar “NameMart Pte. Ltd.”
brand in the name “amazon”lure words (login, verify, secure…) “secure”many hyphens “4”very long name “35”+1 more
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”+1 more
Model opinion: suspicious, confidence 45%. An opinion, not a finding.
brand in the name “bbva”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”+1 more
brand in the name “etsy”brand plus digits “etsy-ordrnotify73616”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”+1 more
brand in the name “etsy”brand plus digits “etsy-ordrnotify91056”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”+1 more
brand in the name “outlook”very long name “28”brand plus digits “everettebrinston48931outlook”brand name at a retail registrar “HOSTINGER operations, UAB”+1 more
brand in the name “facebook”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
brand in the name “facebook”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
brand in the name “fidelity”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
brand spelled with digits “file-share-document-2026-08-26-0nedrive→”many hyphens “6”very long name “39”brand plus digits “file-share-document-2026-08-26-0nedrive”+1 more
brand in the name “icloud”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NAMECHEAP”+1 more
one-letter brand typo “cloud≈icloud”brand plus digits “fun88-cloud-computing”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”+2 more
brand spelled with digits “g0ogle→google”brand plus digits “g0ogle”TLD with a high abuse rate “xyz”brand name at a retail registrar “Gandi SAS”
brand in the name “revolut”brand plus digits “gamerevolution890”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”+3 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand spelled with digits “garuda55-team→steam”brand plus digits “garuda55-team”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand spelled with digits “goog1e3111→google”brand plus digits “goog1e3111”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
brand spelled with digits “goog1e3121→google”brand plus digits “goog1e3121”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
brand spelled with digits “goog1e3131→google”brand plus digits “goog1e3131”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
brand spelled with digits “goog1e3141→google”brand plus digits “goog1e3141”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
brand spelled with digits “goog1e3151→google”brand plus digits “goog1e3151”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
brand in the name “google”lure words (login, verify, secure…) “verification”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
brand in the name “google”lure words (login, verify, secure…) “verification”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”+1 more
brand in the name “google”TLD with a high abuse rate “click”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”+1 more
brand in the name “google”lure words (login, verify, secure…) “service,services”many hyphens “3”brand name at a retail registrar “Wix.com Ltd.”
brand in the name “google”lure words (login, verify, secure…) “service”brand name on a rarely-seen nameserver “abidevan.com”brand name at a retail registrar “Dominet (HK) Limited”
brand in the name “google”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo,LLC”+1 more
brand in the name “google”lure words (login, verify, secure…) “account,accounts”TLD with a high abuse rate “top”brand name at a retail registrar “NameSilo,LLC”+1 more
brand in the name “google”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
brand in the name “hmrc”lure words (login, verify, secure…) “help”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in the name “whatsapp”lure words (login, verify, secure…) “help”TLD with a high abuse rate “xyz”brand name at a retail registrar “Vantage of Convergence (Chengdu) Technol”
brand in the name “hmrc”lure words (login, verify, secure…) “tax”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in the name “hsbc”lure words (login, verify, secure…) “secure”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “OwnRegistrar, Inc.”
brand in the name “hsbc”lure words (login, verify, secure…) “portal,secure”lure suffix “hsbcsecureportal”brand name behind Cloudflare “cloudflare.com”+1 more
brand in the name “shopify”brand plus digits “httpscvh1d7-znmyshopifycom”random-looking name “H=3.89”brand name at a retail registrar “Namify Domains Inc”+1 more
Model opinion: looks like abuse (target: Shopify), confidence 83%. An opinion, not a finding.
brand in the name “apple”brand plus digits “icc0-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “apple”brand plus digits “icc1-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “apple”brand plus digits “icc2-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “apple”brand plus digits “icc3-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “apple”brand plus digits “icc4-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “apple”brand plus digits “icc5-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “apple”brand plus digits “icc6-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “apple”brand plus digits “icc7-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “apple”brand plus digits “icc8-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “apple”brand plus digits “icc9-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Same data as JSON: /api/zone/risk?day=2026-08-27&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.