Flagged newborn domains, Tuesday, September 1, 2026

61 names at tier medium or above in .site, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalarame.sitescore 80echoes aramex· active website
one-letter brand typoarame≈aramexbrand name behind Cloudflarecloudflare.combrand name at a retail registrarWest263 International Limitedbrand in page title, not in the namenationwide+1 more

Model opinion: looks like phishing (target: Joe Gambino's Bakery), confidence 60%. An opinion, not a finding.

Criticalgranitebayapplianceservice.sitescore 72echoes ebay· active website
brand in the nameebaylure words (login, verify, secure…)servicebrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB+1 more

Model opinion: looks benign, confidence 68%. An opinion, not a finding.

Criticalmoviewave.sitescore 60· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflixform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 76%. An opinion, not a finding.

Highhkhgroupservicesgmail.sitescore 55echoes gmail· boilerplate page
brand in the namegmaillure words (login, verify, secure…)service,servicesbrand name at a retail registrarSynergy Wholesale Accreditations Pty Ltdidentical page on many newborns262 identical pages

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highhost-wallet-ledger.sitescore 55echoes ledger· no DNS
brand in the nameledgerlure words (login, verify, secure…)walletbrand name at a retail registrarCV. Rumahweb Indonesia
Highopseconrobinhood.sitescore 55echoes robinhood· other
brand in the namerobinhoodbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.brand in page title, not in the namecloudflare

Model opinion: suspicious (target: Robinhood), confidence 55%. An opinion, not a finding.

Highvanguard-horology.sitescore 55echoes vanguard· blocked the probe
brand in the namevanguardbrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.+2 more
Highladger-lnfo.sitescore 50echoes ledger· boilerplate page
one-letter brand typoladger≈ledgerfree DNS providerdnsowl.combrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC

Model opinion: looks like abuse (target: Ledger), confidence 78%. An opinion, not a finding.

Higharnoni.sitescore 44· active website
page asks for credentialsSign in to your accountlogin formhas_form+login words

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highbismayah.sitescore 44· active website
page asks for credentialsSign in to your accountlogin formhas_form+login words

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Highceloehibah.sitescore 44· active website
page asks for credentialsLogin To Your Accountlogin formhas_form+login words

Model opinion: suspicious (target: Telkom University (CELOE e-learning)), confidence 55%. An opinion, not a finding.

Highmedintuit.sitescore 44echoes intuit· no DNS
brand in the nameintuitbrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highquckinvoiceng.sitescore 44· active website
lure words (login, verify, secure…)invoicebrand in page title, not in the namewhatsappform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highsecured-log.sitescore 44· active website
lure words (login, verify, secure…)securebrand in page title, not in the nameledgerform on a brand-styled pagehas_form
Highonlineroadinsurance.sitescore 42· active website
page impersonates a brandPayPalbrand in page title, not in the namepaypal
Hightryminer.sitescore 42· active website
page impersonates a brandCoinbasebrand in page title, not in the nameapple
Mediumal-tatheer.sitescore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumamilify.sitescore 38· active website
brand in page title, not in the namebookingform on a brand-styled pagehas_form
Mediumbetanotv10.sitescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumcinevood.sitescore 38· boilerplate page
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumclientescercadeti.sitescore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumcoldemailinboxes.sitescore 38· redirects elsewhere
brand in page title, not in the namemicrosoftform on a brand-styled pagehas_form
Mediumcssps.sitescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumf-app1.sitescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumf-app2.sitescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumg5moonshit.sitescore 38· active website
brand in page title, not in the namerobinhoodform on a brand-styled pagehas_form
Mediumgroupconnect.sitescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumhuzaifaaslam.sitescore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumignitepods.sitescore 38· active website
brand in page title, not in the nameappleform on a brand-styled pagehas_form
Mediumkoupon.sitescore 38· active website
brand in page title, not in the namerobinhoodform on a brand-styled pagehas_form
Mediumlocmottus.sitescore 38· active website
brand in page title, not in the nameuberform on a brand-styled pagehas_form
Mediummizocrm.sitescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumpumian.sitescore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumreifornece.sitescore 38· active website
brand in page title, not in the nameamazonform on a brand-styled pagehas_form
Mediumsolanacontract.sitescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumtakeonep.sitescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumthedealhub.sitescore 38· active website
brand in page title, not in the nameamazonform on a brand-styled pagehas_form
Mediumtheveganmarket.sitescore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumtrytenure.sitescore 38· active website
brand in page title, not in the namerobinhoodform on a brand-styled pagehas_form
Mediumyokel.sitescore 38· active website
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumzimplichat.sitescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumdpbossofficial.sitescore 36· registrar placeholder
lure words (login, verify, secure…)officialbrand in page title, not in the namehostingeridentical page on many newborns104 identical pages
Mediumladada.sitescore 36echoes lazada· robots.txt denied
one-letter brand typoladada≈lazadabrand name at a retail registrarRegistrar of Domain Names REG.RU LLC
Mediumsupporthelp.sitescore 36· registrar placeholder
lure words (login, verify, secure…)supportbrand in page title, not in the namehostingeridentical page on many newborns104 identical pages
Mediumzaidgraphix.sitescore 34· active website
page pushes urgent paymentLimited Time Offerbrand in page title, not in the nameetsy
Mediumeducacaoeoferta.sitescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns104 identical pages
Mediumfruitpay.sitescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns104 identical pages
Mediumhae-test.sitescore 30· active website
page asks for credentialsSign in to your account
Mediumma-toiture-neuveofficielle.sitescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns104 identical pages
Mediummultimac.sitescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns104 identical pages

Same data as JSON: /api/zone/risk?day=2026-09-01&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.