Flagged newborn domains, Thursday, August 27, 2026

46 names at tier low or above in .tech, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticaluseonera.techscore 60· active website
page impersonates a brandMetaMaskbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highagenticloud.techscore 50echoes icloud· active website
brand in the nameicloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highamazongc.techscore 50echoes amazon· blocked the probe
brand in the nameamazonbrand name behind Cloudflarecloudflare.combrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLC
Highrobinhoodinvest.techscore 44echoes robinhood
brand in the namerobinhoodbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Mediumidreesworks.techscore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumlittlenexus.techscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumthebellwether.techscore 38· active website
brand in page title, not in the nameslackform on a brand-styled pagehas_form
Mediumsitowise.techscore 28· active website
free DNS providerdnsowl.combrand in page title, not in the namerobinhood
Lowxn--rhq8oy98adli6jt2xnuxc.techscore 23· no DNS
punycode name世界人工智能网 scripts=CJKrandom-looking nameH=4.14
Lowsmacaya.techscore 22· active website
page impersonates a brandPayPal
Lowusenomic.techscore 22· active website
page impersonates a brandMetaMask
Lowappvertexhub.techscore 20· blocked the probe
brand in page title, not in the namechatgpt
Lowdsagent.techscore 20· server error
brand in page title, not in the namecloudflare
Lowergons.techscore 20· active website
brand in page title, not in the namegodaddy
Lowjasonautomate.techscore 20· active website
brand in page title, not in the nameopenai
Lowjbfp.techscore 20· active website
brand in page title, not in the namewhatsapp
Lowmilaknight.techscore 20· active website
brand in page title, not in the nameshopify
Lownahuel.techscore 20· redirects elsewhere
brand in page title, not in the nameinstagram
Lownguvu.techscore 20· active website
brand in page title, not in the namenamecheap
Lowptt-calendar.techscore 20· active website
brand in page title, not in the namegoogle
Lowsmarthaul.techscore 20· active website
brand in page title, not in the namequickbooks
Lowsugarrimz.techscore 20· active website
brand in page title, not in the namebooking
Lowvulkan.techscore 20· active website
brand in page title, not in the namewordpress
Lowyourlia.techscore 20· active website
brand in page title, not in the namewhatsapp
Lowkraken-marketplace.techscore 19echoes kraken· server error
ambiguous brand wordkrakenbrand name and brand-styled pagekraken
Lowxn--80aaafh2g.techscore 18· empty page
punycode nameватага scripts=CYRILLIC
Lowxn--80aaukc2b.techscore 18· empty page
punycode nameсказка scripts=CYRILLIC
punycode nameüberblick scripts=LATIN
punycode nameпродукты scripts=CYRILLIC
punycode namedeepseek集团 scripts=CJK/LATIN
Lowxn--e1a6ab.techscore 18· no DNS
punycode nameцех scripts=CYRILLIC
Lowbhairav.techscore 14· active website
login formhas_form+login words
Lowcoale.techscore 14· active website
login formhas_form+login words
Lowcommandsuite.techscore 14· active website
login formhas_form+login words
Lowdexisit-asset.techscore 14· active website
login formhas_form+login words
Lowhotelducap.techscore 14· active website
login formhas_form+login words
Lowverify-online.techscore 14· suspended
lure words (login, verify, secure…)verifylure suffixverify-online
Lowxacto.techscore 14· active website
login formhas_form+login words
Lowarsipa-services.techscore 12· registrar placeholder
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
Lowdltservices.techscore 12· active website
lure words (login, verify, secure…)service,services
Lowgetloopservices.techscore 12· no DNS
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
Lowtryloopservices.techscore 12· no DNS
lure words (login, verify, secure…)service,services
Lowwa-services.techscore 12
lure words (login, verify, secure…)service,services
many hyphens4very long name28

Same data as JSON: /api/zone/risk?day=2026-08-27&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.