Flagged newborn domains, Tuesday, September 1, 2026

481 names at tier low or above in .online, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalrevolutionhcea.onlinescore 68echoes revolut· active website
brand in the namerevolutbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.+1 more

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Criticalrevolutionkphy.onlinescore 68echoes revolut· active website
brand in the namerevolutbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticalshadowvanguard.onlinescore 68echoes vanguard· active website
brand in the namevanguardbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UABform on a brand-styled pagehas_form+1 more

Model opinion: looks like abuse, confidence 55%. An opinion, not a finding.

Criticalundian-tiktok.onlinescore 64echoes tiktok· active website
brand in the nametiktokbrand name behind Cloudflarecloudflare.combrand name at a retail registrarName.com, Inc.brand in page title, not in the nameapple

Model opinion: looks like phishing (target: TikTok), confidence 75%. An opinion, not a finding.

Criticaldelivery-services.onlinescore 62· active website
lure words (login, verify, secure…)delivery,service,servicespage asks for credentialslogin to your accountlogin formhas_form+login words

Model opinion: looks benign, confidence 55%. An opinion, not a finding.

Highglobal-cloud.onlinescore 55echoes icloud· boilerplate page
one-letter brand typocloud≈icloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.+1 more

Model opinion: unreachable when judged, confidence 78%. An opinion, not a finding.

Highjosedisableionos001.onlinescore 55echoes ionos· registrar placeholder
brand in the nameionosbrand plus digitsjosedisableionos001brand name at a retail registrarIONOS SEform on a brand-styled pagehas_form+1 more

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highjosedisableionos003.onlinescore 55echoes ionos· registrar placeholder
brand in the nameionosbrand plus digitsjosedisableionos003brand name at a retail registrarIONOS SEform on a brand-styled pagehas_form+1 more

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highmodel-cloud-7.onlinescore 55echoes icloud· boilerplate page
one-letter brand typocloud≈icloudbrand plus digitsmodel-cloud-7brand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.+2 more

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highsecurity-booking.onlinescore 55echoes booking· no DNS
brand in the namebookinglure words (login, verify, secure…)securitybrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Inc+1 more
Highsupport-lcloud.onlinescore 55echoes icloud· robots.txt denied
one-letter brand typolcloud≈icloudlure words (login, verify, secure…)supportbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo, LLC+1 more
Highvanguard-horology.onlinescore 55echoes vanguard· blocked the probe
brand in the namevanguardbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc+2 more
Highbybit-web3.onlinescore 52echoes bybit· robots.txt denied
brand in the namebybitbrand plus digitsbybit-web3brand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highcharles-schwab.onlinescore 48echoes schwab· boilerplate page
brand in the nameschwabbrand name at a retail registrarTucows Domains Inc.identical page on many newborns1775 identical pages

Model opinion: looks like abuse (target: Charles Schwab), confidence 72%. An opinion, not a finding.

Highmaps-lcloud.onlinescore 48echoes icloud· robots.txt denied
one-letter brand typolcloud≈icloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC
Highmicroosoft.onlinescore 48echoes microsoft· empty page
one-letter brand typomicroosoft≈microsoftbrand name behind Cloudflarecloudflare.combrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB

Model opinion: looks like phishing (target: Microsoft), confidence 95%. An opinion, not a finding.

Highnintendotechnologies.onlinescore 48echoes nintendo· boilerplate page
brand in the namenintendobrand name at a retail registrarNetwork Solutions, LLCidentical page on many newborns152 identical pages

Model opinion: looks like abuse (target: Nintendo), confidence 62%. An opinion, not a finding.

Highchatchatgpt.onlinescore 44echoes chatgpt· active website
brand in the namechatgptbrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.

Model opinion: looks like abuse, confidence 68%. An opinion, not a finding.

Highiwhatsapp.onlinescore 44echoes whatsapp· empty page
brand in the namewhatsappbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB

Model opinion: suspicious, confidence 52%. An opinion, not a finding.

Highsmartschoolerp.onlinescore 44· active website
page asks for credentialsSign in to your accountlogin formhas_form+login words

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highcineflixplusultra.onlinescore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namecloudflare
Highendsub.onlinescore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix
Highteegram.onlinescore 42echoes telegram· active website
one-letter brand typoteegram≈telegrambrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.
Medium3dbakeryshops.onlinescore 38· redirects elsewhere
brand in page title, not in the nameappleform on a brand-styled pagehas_form
Mediumaeroprimebook.onlinescore 38· active website
brand in page title, not in the namebookingform on a brand-styled pagehas_form
Mediumagenteclinic.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumassembledublin.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumbottelegram.onlinescore 38echoes telegram· no web server
brand in the nametelegrambrand name at a retail registrarGoDaddy.com, LLC
Mediumcafepmp.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumcarofare.onlinescore 38· active website
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumcarrentalcares.onlinescore 38· active website
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumcodeconnectmedia.onlinescore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumcoolplanetlk.onlinescore 38· boilerplate page
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumdelaikrasivo.onlinescore 38· placeholder page
brand in page title, not in the nametelegramform on a brand-styled pagehas_form
Mediumdimefresh.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumelgatonegro.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumgmaile.onlinescore 38echoes gmail· no web server
brand in the namegmailbrand name at a retail registrarGoDaddy.com, LLC
Mediumjdi-algo-openai.onlinescore 38echoes openai· empty page
brand in the nameopenaibrand name at a retail registrarDNSPod, Inc.
Mediumlojazgames.onlinescore 38· active website
brand in page title, not in the nameplaystationform on a brand-styled pagehas_form
Mediummaxwaytrading.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediummydrian.onlinescore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediummywebpc.onlinescore 38· active website
brand in page title, not in the nametiktokform on a brand-styled pagehas_form
Mediumnaomicloud.onlinescore 38echoes icloud· boilerplate page
brand in the nameicloudbrand name at a retail registrarRegistrar of Domain Names REG.RU LLC
Mediumnettocode.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumorbeof.onlinescore 38· active website
brand in page title, not in the nameinstagramform on a brand-styled pagehas_form
Mediumpraticcleanlavagemaseco.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumprettywithatwistreviews.onlinescore 38· redirects elsewhere
brand in page title, not in the nameamazonform on a brand-styled pagehas_form
Mediumprofessionalmoversdubai.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumrecrutamentoagora.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumrifaib.onlinescore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form

Same data as JSON: /api/zone/risk?day=2026-09-01&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.