Flagged newborn domains, Friday, August 28, 2026

41 names at tier medium or above in .site, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalhahaokok.sitescore 68· active website
page asks for credentialsSign in to your accountbrand in page title, not in the namefacebookform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highmobile-pay-dk-casinoer.sitescore 55echoes tmobile· redirects elsewhere
one-letter brand typomobile≈tmobilelure words (login, verify, secure…)paymany hyphens3brand name behind Cloudflarecloudflare.com+3 more

Model opinion: looks like abuse (target: MobilePay), confidence 72%. An opinion, not a finding.

Highstarlink88.sitescore 55echoes starlink· no DNS
brand in the namestarlinkbrand plus digitsstarlink88brand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.+1 more
Hightracecoreassetsrecovery.sitescore 50· blocked the probe
lure words (login, verify, secure…)recover,recoverybrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highprestigebouquetonetsy.sitescore 48echoes etsy· boilerplate page
brand in the nameetsybrand name at a retail registrarTucows Domains Inc.identical page on many newborns1814 identical pages

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highcreditosaprobados-itau9f340021badc5f856e608a3af039f6.sitescore 46echoes itau· robots.txt denied
brand in the nameitauvery long name52brand plus digitscreditosaprobados-itau9f340021badc5f856ebrand name behind Cloudflarecloudflare.com+2 more
Highccsict-bulletin.sitescore 44· active website
page asks for credentialsSign in to your accountlogin formhas_form+login words

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highdescretedeliverymail.sitescore 44· active website
lure words (login, verify, secure…)deliverybrand in page title, not in the namewordpressform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highoc24limited.sitescore 44· redirects elsewhere
lure words (login, verify, secure…)limitedbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Mediumbombayinn.sitescore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Mediumbrandsfactory.sitescore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Mediumdextsipath.sitescore 38· blocked the probe
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumdirectshow.sitescore 38· active website
brand in page title, not in the namebookingform on a brand-styled pagehas_form
Mediumdonga-pq.sitescore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumhifirodriguez.sitescore 38· active website
brand in page title, not in the namefidelityform on a brand-styled pagehas_form
Mediumimanweb.sitescore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediuminfrpumkit.sitescore 38· blocked the probe
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumlod-vd.sitescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediummysuperhero.sitescore 38· redirects elsewhere
brand in page title, not in the namedisneyform on a brand-styled pagehas_form
Mediumorbituastro.sitescore 38· active website
brand in page title, not in the namebookingform on a brand-styled pagehas_form
Mediumrevo-sk.sitescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumscriptcuan.sitescore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumshreecab.sitescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumtakmi0.sitescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumweixinhao.sitescore 38· active website
brand in page title, not in the namesteamform on a brand-styled pagehas_form
Mediumallaccessfans.sitescore 36· active website
lure words (login, verify, secure…)accesspage asks for credentialsVerify your identity
Mediumcloud-crest.sitescore 36echoes icloud· not probed yet
one-letter brand typocloud≈icloudbrand name at a retail registrarGoDaddy.com, LLC
Mediumdivyam-docsign.sitescore 36echoes docusign· empty page
one-letter brand typodocsign≈docusignbrand name at a retail registrarName.com, Inc.
Mediumexperience-cloud.sitescore 36echoes icloud· no DNS
one-letter brand typocloud≈icloudbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Mediumusebayside.sitescore 32echoes ebay· boilerplate page
brand in the nameebaybrand name at a retail registrarMesh Digital Limitedidentical page on many newborns1814 identical pages
Mediumartista-parana.sitescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns96 identical pages
Mediumearnpaisa.sitescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns96 identical pages
Mediumgrowfan.sitescore 30· active website
page asks for credentialslog in to your account
Mediumjwmdigital.sitescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns96 identical pages
Mediumlojaoriginal.sitescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns96 identical pages
Mediummypersonalreview.sitescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns96 identical pages
Mediumnutrionline.sitescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns96 identical pages
Mediumprestigio.sitescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns96 identical pages
Mediumusser-veriiification-ssupport.sitescore 30· blocked the probe
lure words (login, verify, secure…)supportvery long name29brand in page title, not in the namecloudflare
Mediumclaimnest.sitescore 26· blocked the probe
lure words (login, verify, secure…)claimbrand in page title, not in the namecloudflare
Mediumkurwa-bonusn.sitescore 26· blocked the probe
lure words (login, verify, secure…)bonusbrand in page title, not in the namecloudflare

Same data as JSON: /api/zone/risk?day=2026-08-28&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.