Flagged newborn domains, Tuesday, September 1, 2026

42 names at tier low or above in .cloud, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalozpsharepointonline.cloudscore 65echoes sharepoint· active website
brand in the namesharepointbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UABpage impersonates a brandMicrosoft 365+1 more

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Criticalbluecost.cloudscore 60echoes bluehost· active website
one-letter brand typobluecost≈bluehostbrand name at a retail registrarTucows Domains Inc.form on a brand-styled pagehas_formform submits over plain HTTPhttp://bluecost.cloud/

Model opinion: looks benign, confidence 78%. An opinion, not a finding.

Hightectonic-finance.cloudscore 48echoes binance· active website
one-letter brand typofinance≈binancebrand name behind Cloudflarecloudflare.combrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITEDbrand name at a watch-list registrarNICENIC INTERNATIONAL GROUP CO., LIMITED

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Mediumgoogleaillmapi.cloudscore 38echoes google· no web server
brand in the namegooglebrand name at a retail registrarGoDaddy
Mediumltsn.cloudscore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediummicrosoftedgehost.cloudscore 38echoes microsoft· no web server
brand in the namemicrosoftbrand name at a retail registrarGoDaddy
Mediumonzr.cloudscore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumservicioslatinosea.cloudscore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediummundays.cloudscore 30· active website
page asks for credentialslog in to your account
Lowagrotutelaitalia.cloudscore 20· redirects elsewhere
brand in page title, not in the namewordpress
Lowarchcanvas.cloudscore 20· active website
brand in page title, not in the namezoom
Lowascessaar.cloudscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowascessoar.cloudscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowascessorar.cloudscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowberlian888bm.cloudscore 20· active website
brand in page title, not in the namenamecheap
Lowberlianprompt.cloudscore 20· active website
brand in page title, not in the namenamecheap
Lowburnsies.cloudscore 20· server error
brand in page title, not in the namecloudflare
Lowconnect-pls.cloudscore 20· redirects elsewhere
brand in page title, not in the namewordpress
Lowgoltec.cloudscore 20· active website
brand in page title, not in the namehostinger
Lowincendio.cloudscore 20· active website
brand in page title, not in the nameslack
Lowlarrytechnologyhub.cloudscore 20· active website
brand in page title, not in the namewordpress
Lowmyassistdesk.cloudscore 20· active website
brand in page title, not in the namegoogle
Lownamuapplication.cloudscore 20· server error
brand in page title, not in the namecloudflare
Lowninesnier.cloudscore 20· active website
brand in page title, not in the nametiktok
Lowusemarsal.cloudscore 20· active website
brand in page title, not in the namewhatsapp
Lowvdsblog.cloudscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowwellpay.cloudscore 20· redirects elsewhere
brand in page title, not in the namecloudflare
Lowexepad.cloudscore 14· active website
login formhas_form+login words
Lowformitra-ims.cloudscore 14· active website
login formhas_form+login words
Lowfutureanalytica.cloudscore 14· active website
login formhas_form+login words
Lowneeconerp.cloudscore 14· active website
login formhas_form+login words
Lowsarfrazfeeds.cloudscore 14· active website
login formhas_form+login words
Lowsuportec.cloudscore 14· active website
login formhas_form+login words
Lowteknisipbb-pa.cloudscore 14· parked, for sale
login formhas_form+login words
Lowteleflowhub.cloudscore 14· active website
login formhas_form+login words
Lowudin83900id.cloudscore 14· active website
login formhas_form+login words
Lowudinheylinkid.cloudscore 14· active website
login formhas_form+login words
Lowudintogel124id.cloudscore 14· active website
login formhas_form+login words
Lowudintogel880id.cloudscore 14· active website
login formhas_form+login words
Lowudintogel956id.cloudscore 14· active website
login formhas_form+login words
Lowudintogelindoid.cloudscore 14· active website
login formhas_form+login words
Lowudintogelterbaruid.cloudscore 14· active website
login formhas_form+login words

Same data as JSON: /api/zone/risk?day=2026-09-01&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.