Flagged newborn domains, Saturday, August 29, 2026

7 names at tier medium or above in .website, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalbestbuyfinds.websitescore 62echoes bestbuy· active website
brand in the namebestbuybrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UABform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highmuqbil-livelinks.websitescore 44· active website
page asks for credentialsSign in to your accountlogin formhas_form+login words

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highnorth-cloud-flip.websitescore 42echoes icloud· no web server
one-letter brand typocloud≈icloudbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highsmall-cloud-turn.websitescore 42echoes icloud· empty page
one-letter brand typocloud≈icloudbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Mediumgd143e.websitescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumxcloud.websitescore 36echoes icloud· no DNS
one-letter brand typoxcloud≈icloudbrand name at a retail registrarHefei Juming Network Technology Co., Ltd
Mediumtryvapofil.websitescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns80 identical pages

Same data as JSON: /api/zone/risk?day=2026-08-29&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.