Flagged newborn domains, Thursday, August 27, 2026

88 names at tier low or above in .vip, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalyukiwatch.vipscore 60· active website
page impersonates a brandUSPSbrand in page title, not in the nameebayform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 95%. An opinion, not a finding.

Highstarlinkai.vipscore 50echoes starlink· no DNS
brand in the namestarlinkbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highamazn.vipscore 46echoes amazon· boilerplate page
one-letter brand typoamazn≈amazonbrand name at a retail registrarOne.com A/Sidentical page on many newborns57 identical pages

Model opinion: looks like abuse (target: Amazon), confidence 72%. An opinion, not a finding.

Highgooglepro.vipscore 44echoes google
brand in the namegooglebrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highicloud-ai.vipscore 44echoes icloud· empty page
brand in the nameicloudbrand name at a retail registrarAlibaba Cloud Computing Ltd. d/b/a HiChibrand name at a watch-list registrarAlibaba Cloud Computing Ltd. d/b/a HiChi
Highstockdoge.vipscore 42· active website
page impersonates a brandMetamaskbrand in page title, not in the namechase

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Mediumglobalmall.vipscore 38· active website
brand in page title, not in the namerakutenform on a brand-styled pagehas_form
Mediumpsiphon.vipscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumchazingtime.vipscore 32· active website
page impersonates a brandUSPSpage sells replica goodsReplica Watch
Mediumchazingtimewatch.vipscore 32· active website
page impersonates a brandUSPSpage sells replica goodsReplica Watch
Mediumchazingtimewatches.vipscore 32· active website
page impersonates a brandUSPSpage sells replica goodsReplica Watch
Mediumintimewatch.vipscore 32· active website
page impersonates a brandUSPSpage sells replica goodsReplica Watch
Mediumlilywatch.vipscore 32· active website
page impersonates a brandUSPSpage sells replica goodsReplica Watch
Mediumnecoclock.vipscore 32· active website
page impersonates a brandUSPSpage sells replica goodsReplica Watch
Mediumrepgeekwatch.vipscore 32· active website
page impersonates a brandUSPSpage sells replica goodsReplica Watch
Lowxn--4qr17vgktryu.vipscore 23· boilerplate page
punycode name百度贴吧 scripts=CJKrandom-looking nameH=3.66
punycode name禾禾街区 scripts=CJKrandom-looking nameH=3.66
punycode name风来了 scripts=CJKrandom-looking nameH=3.70
Lowaudi-ws.vipscore 20· empty page
brand in page title, not in the namewhatsapp
Lowautomatex.vipscore 20· active website
brand in page title, not in the nameroblox
Lowboostdrop.vipscore 20· active website
brand in page title, not in the namesteam
Lowbrightnestdaycare.vipscore 20· active website
brand in page title, not in the namenamecheap
Lowcytoken.vipscore 20· empty page
brand in page title, not in the nameopenai
Lowfindable.vipscore 20· active website
brand in page title, not in the namegoogle
Lowfutiba18.vipscore 20· active website
brand in page title, not in the nametelegram
Lowgrandpashabet-liverisim.vipscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowgrandpashabet8256.vipscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowhts-ws.vipscore 20· empty page
brand in page title, not in the namewhatsapp
Lowjun88kb.vipscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowjun88kc.vipscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowkovaleva.vipscore 20· active website
brand in page title, not in the namenamecheap
Lowmarsbahis-publicgiris.vipscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowmooonshot.vipscore 20· active website
brand in page title, not in the namephantom
Lownbell.vipscore 20· redirects elsewhere
brand in page title, not in the namebooking
Lowproaiapi.vipscore 20· active website
brand in page title, not in the nameopenai
Lowpvgeneration.vipscore 20· active website
brand in page title, not in the namenamecheap
Lowsafemars.vipscore 20· active website
brand in page title, not in the namerobinhood
Lowsheinc.vipscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowsorichs.vipscore 20· active website
brand in page title, not in the namewordpress
Lowvdcasino-2026partners.vipscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowviktorcasinos.vipscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowxhhapi.vipscore 20· empty page
brand in page title, not in the nameopenai
Lowxn--0et737i.vipscore 18
punycode name路少 scripts=CJK
punycode name资源大全 scripts=CJK
punycode name南悦情缘 scripts=CJK
Lowxn--6mqv22a.vipscore 18· active website
punycode name宁仔 scripts=CJK
punycode name问鼎会国际 scripts=CJK
punycode name艾尚潮玩 scripts=CJK
Lowxn--9kqp2f.vipscore 18
punycode name凌云 scripts=CJK
punycode name凌云国际 scripts=CJK

Same data as JSON: /api/zone/risk?day=2026-08-27&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.