Flagged newborn domains, Tuesday, September 1, 2026

387 names at tier low or above in .shop, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalajsmmpanel.shopscore 68· active website
page asks for credentialslog in to your accountbrand in page title, not in the nameinstagramform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 55%. An opinion, not a finding.

Criticalgarde-maiade.shopscore 60· active website
page impersonates a brandFedExbrand in page title, not in the namenationwideform on a brand-styled pagehas_form

Model opinion: looks like a scam (target: Garde-Malade (garde-malade-dr.it.com)), confidence 79%. An opinion, not a finding.

Criticalpostagestamps.shopscore 60· active website
page impersonates a brandUSPSbrand in page title, not in the nameuspsform on a brand-styled pagehas_form

Model opinion: looks like abuse (target: USPS), confidence 78%. An opinion, not a finding.

Highvlonethugmail.shopscore 54echoes gmail· registrar placeholder
brand in the namegmailbrand name at a retail registrarNamecheap, Inc.brand name at a watch-list registrarNamecheap, Inc.identical page on many newborns4339 identical pages

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highmaglitaus.shopscore 52echoes itau· active website
brand in the nameitaubrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.+1 more

Model opinion: looks like phishing (target: Maglite), confidence 79%. An opinion, not a finding.

Highnetflix-and-chills.shopscore 52echoes netflix· robots.txt denied
brand in the namenetflixfree DNS providerdnsowl.combrand name at a retail registrarNameSilobrand name at a watch-list registrarNameSilo
Hightesttiktokksl.shopscore 52echoes tiktok· active website
brand in the nametiktokbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Inc.brand name at a watch-list registrarDynadot Inc.+1 more

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highoperacaotiktok.shopscore 51echoes tiktok· active website
brand in the nametiktokbrand name behind Cloudflarecloudflare.combrand name and brand-styled pagetiktok

Model opinion: suspicious, confidence 58%. An opinion, not a finding.

Highaccessline.shopscore 48· active website
lure words (login, verify, secure…)accesspage impersonates a brandOffice 365brand in page title, not in the namenetflix

Model opinion: looks like abuse, confidence 76%. An opinion, not a finding.

Highallpay-cachi.shopscore 46echoes alipay· active website
one-letter brand typoallpay≈alipayform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highauspost-new-order001.shopscore 46echoes auspost· no web server
brand in the nameauspostbrand plus digitsauspost-new-order001brand name at a retail registrarWeb Commerce Communication Ltd.
Highgetvagusnerve.shopscore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix
Highmyvagusnerve.shopscore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix
Highspotfarm.shopscore 42· active website
page impersonates a brandPayPalbrand in page title, not in the namespotify
Hightryvagusnerve.shopscore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix
Medium777352638.shopscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumabbyglow.shopscore 38· active website
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumagacity.shopscore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumantwerps.shopscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumbioquisi.shopscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumbostono.shopscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumcoldemailinboxes.shopscore 38· redirects elsewhere
brand in page title, not in the namemicrosoftform on a brand-styled pagehas_form
Mediumcutieland.shopscore 38· active website
brand in page title, not in the nametiktokform on a brand-styled pagehas_form
Mediumdarazeemystyboxzur.shopscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumdealnovaus.shopscore 38· active website
brand in page title, not in the nameamazonform on a brand-styled pagehas_form
Mediumforasoport.shopscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumgannasir.shopscore 38· active website
brand in page title, not in the namexboxform on a brand-styled pagehas_form
Mediumgetslushiemachine.shopscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumid678123.shopscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumid721614.shopscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumitchozen.shopscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumkaptenboy.shopscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumodel.shopscore 38· boilerplate page
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumphoneplanet.shopscore 38· boilerplate page
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumprojetosweb.shopscore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumrattlers.shopscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumregapolis.shopscore 38· active website
brand in page title, not in the nameinstagramform on a brand-styled pagehas_form
Mediumsagea.shopscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumsoftmocc.shopscore 38· blocked the probe
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumtawhibabyonline.shopscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumtoyless.shopscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumtrafficbullet.shopscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumvendingiqsupply.shopscore 38· active website
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumws-messager.shopscore 38· blocked the probe
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumzigzaglk.shopscore 38· boilerplate page
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumzwty.shopscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumamazonassoftwarelab.shopscore 36echoes amazon· placeholder page
brand in the nameamazonbrand name behind Cloudflarecloudflare.com
Mediumgmailb.shopscore 36echoes gmail· no DNS
brand in the namegmailbrand name behind Cloudflarecloudflare.com
Mediumlimitedstock.shopscore 36· registrar placeholder
lure words (login, verify, secure…)limitedbrand in page title, not in the namehostingeridentical page on many newborns104 identical pages
Mediumlinemedianews.shopscore 36echoes lineme· placeholder page
brand in the namelinemebrand name behind Cloudflarecloudflare.com

Same data as JSON: /api/zone/risk?day=2026-09-01&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.