Flagged newborn domains, Wednesday, September 2, 2026

8 names at tier critical or above in .com, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticaltginnovationoutlook.comscore 71echoes outlook· active website
brand in the nameoutlookbrand name at a retail registrarName.com, Inc.brand name and brand-styled pageoutlookform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Criticalgmail-buysell.comscore 67echoes gmail· active website
brand in the namegmailfree DNS providerdnsowl.combrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC+1 more

Model opinion: looks like abuse, confidence 78%. An opinion, not a finding.

Criticalsexystiktoksukone.comscore 61echoes tiktok· active website
brand in the nametiktokbrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Incbrand name and brand-styled pagetiktok+1 more

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Criticalbuystripeaccounts.comscore 60echoes stripe· active website
brand in the namestripelure words (login, verify, secure…)account,accountsbrand name on a rarely-seen nameserverourhoster.combrand name at a retail registrarAppCroNix Infotech Private Limited, d/b/

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Criticalinsesa-costarica.comscore 60echoes intesa· active website
one-letter brand typoinsesa≈intesabrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.coform on a brand-styled pagehas_formform submits over plain HTTPhttp://insesa-costarica.com/

Model opinion: looks like abuse, confidence 78%. An opinion, not a finding.

Criticalmobile-al-autotglass.comscore 60echoes tmobile· active website
one-letter brand typomobile≈tmobilebrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.form on a brand-styled pagehas_form

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Criticalnontongratis.comscore 60· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflixform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Criticalpackagetrackingapi.comscore 60· active website
lure words (login, verify, secure…)package,track,trackingpage impersonates a brandUSPSbrand in page title, not in the namefedex

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-09-02&tier=critical. Screenshots and the model's reasoning are on each domain's evidence page.