Flagged newborn domains, Sunday, September 6, 2026

58 names at tier medium or above in .shop, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalvnroblox.shopscore 63echoes roblox· active website
brand in the namerobloxbrand name and brand-styled pagerobloxform on a brand-styled pagehas_form

Model opinion: looks like abuse (target: Roblox), confidence 62%. An opinion, not a finding.

Criticalxboxx.shopscore 62echoes xbox· active website
brand in the namexboxbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UABform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highfacebook-secure.shopscore 55echoes facebook· no DNS
brand in the namefacebooklure words (login, verify, secure…)securebrand name behind Cloudflarecloudflare.com
Highfinance-agent.shopscore 55echoes binance· registrar placeholder
one-letter brand typofinance≈binanceform on a brand-styled pagehas_formidentical page on many newborns1111 identical pages

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highfinance-agents.shopscore 55echoes binance· registrar placeholder
one-letter brand typofinance≈binanceform on a brand-styled pagehas_formidentical page on many newborns1111 identical pages

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highgg88tiktok.shopscore 55echoes tiktok· blocked the probe
brand in the nametiktokbrand plus digitsgg88tiktokbrand name behind Cloudflarecloudflare.combrand in page title, not in the namecloudflare
Highkraken-krab1.shopscore 55echoes kraken· empty page
brand in the namekrakenbrand plus digitskraken-krab1brand name behind Cloudflarecloudflare.comform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Highuspsez.shopscore 54echoes usps· active website
brand in the nameuspsbrand name behind Cloudflarecloudflare.comform on a brand-styled pagehas_form

Model opinion: looks like phishing (target: PEZ Candy), confidence 72%. An opinion, not a finding.

Highsuper-social.shopscore 44· active website
page asks for credentialsSign in to your accountlogin formhas_form+login words

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Hightcgupdate.shopscore 44· active website
lure words (login, verify, secure…)updatebrand in page title, not in the namechaseform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highwhatsappgo.shopscore 44echoes whatsapp· empty page
brand in the namewhatsappbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highwarhead1.shopscore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namewhatsapp
Highcuidadobelleza.shopscore 40echoes adobe· blocked the probe
brand in the nameadobebrand name behind Cloudflarecloudflare.combrand in page title, not in the namecloudflare
Highspeedyapicloud.shopscore 40echoes icloud· registrar placeholder
brand in the nameicloudidentical page on many newborns4129 identical pages
Medium512research.shopscore 38· placeholder page
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Medium8bitda.shopscore 38· active website
brand in page title, not in the namexboxform on a brand-styled pagehas_form
Medium8bitdousua.shopscore 38· active website
brand in page title, not in the namexboxform on a brand-styled pagehas_form
Mediumashvektaxiandtours.shopscore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumcode-canvas-craftpro.shopscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumcom-pre-reserv138419.shopscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumcontrolgame.shopscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumcrosellers.shopscore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumgamezil.shopscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumid678789.shopscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumkhushbumart.shopscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumlasp.shopscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediummisterpattasukaaran.shopscore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumoasisapplianceworks.shopscore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumomnitap.shopscore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumshreewincarpro.shopscore 38· active website
brand in page title, not in the namebookingform on a brand-styled pagehas_form
Mediumtechno-mania.shopscore 38· active website
brand in page title, not in the nameappleform on a brand-styled pagehas_form
Mediumtribufactory.shopscore 38· active website
brand in page title, not in the nametiktokform on a brand-styled pagehas_form
Mediumzavorawear.shopscore 38· active website
brand in page title, not in the namephantomform on a brand-styled pagehas_form
Mediumalipay-me.shopscore 36echoes alipay· no DNS
brand in the namealipaybrand name behind Cloudflarecloudflare.com
Mediumhosting-test-cloudflare.shopscore 36echoes cloudflare· blocked the probe
brand in the namecloudflarebrand name behind Cloudflarecloudflare.com
Mediummercadolibres.shopscore 36echoes mercadolibre· no DNS
brand in the namemercadolibrebrand name behind Cloudflarecloudflare.com
Mediumtiktoka.shopscore 36echoes tiktok· active website
brand in the nametiktokbrand name behind Cloudflarecloudflare.com
Mediumwal-mart-clearance.shopscore 36echoes walmart· active website
brand in the namewalmartbrand name on a rarely-seen nameservertinyurl.com
Mediumccloud.shopscore 34echoes icloud· no DNS
one-letter brand typoccloud≈icloudbrand name behind Cloudflarecloudflare.com
Mediumjptoto-mobile.shopscore 34echoes tmobile· server error
one-letter brand typomobile≈tmobilebrand name behind Cloudflarecloudflare.com
Mediumascendmarketing.shopscore 30· active website
page asks for credentialsLogin to your account
Mediumbuyingood.shopscore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns68 identical pages
Mediumbuyshopnewofferss.shopscore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns68 identical pages
Mediumflexosamine-site.shopscore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns68 identical pages
Mediumfranceiptv-abonnement.shopscore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns68 identical pages
Mediuminfinitcast.shopscore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns68 identical pages
Mediumloweskinepilator.shopscore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns68 identical pages
Mediummiguelpadre.shopscore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns68 identical pages
Mediummindcanvas.shopscore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns68 identical pages
Mediummytiktok.shopscore 30echoes tiktok· no DNS
brand in the nametiktok

Same data as JSON: /api/zone/risk?day=2026-09-06&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.