Flagged newborn domains, Monday, October 5, 2026

37 names at tier low or above in .tech, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highrobinhood-tape.techscore 53echoes robinhood· active website
brand in the name “robinhood”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”brand name and brand-styled page “robinhood”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highgoogleflow.techscore 44echoes google· no web server
brand in the name “google”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highgooglesi.techscore 44echoes google· no DNS
brand in the name “google”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Highsparks-salesforce.techscore 44echoes salesforce· empty page
brand in the name “salesforce”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”

Model opinion: suspicious (target: Salesforce), confidence 72%. An opinion, not a finding.

Medium20techspark.techscore 38· active website
brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 97%. An opinion, not a finding.

Lowplumpay.techscore 22· active website
page impersonates a brand “PayPal”
Lowxn--80aaafbt4aonffgvtfk0oe1c.techscore 22· robots.txt denied
punycode name “квантоваяреальность scripts=CYRILLIC”very long name “28”
Lowcensorflow.techscore 20· server error
brand in page title, not in the name “cloudflare”
Lowdayla.techscore 20· active website
brand in page title, not in the name “telegram”
Lowdocdrop.techscore 20· active website
brand in page title, not in the name “whatsapp”
Lowfreshlookllp.techscore 20· empty page
brand in page title, not in the name “booking”
Lowhookforge.techscore 20· active website
brand in page title, not in the name “uniswap”
Lowjastipbyerlin.techscore 20· parked, for sale
brand in page title, not in the name “whatsapp”
Lowkalvione.techscore 20· active website
brand in page title, not in the name “whatsapp”
Lowmahmoudabdelaziz.techscore 20· active website
brand in page title, not in the name “google”
Lownoctis-agency.techscore 20· empty page
brand in page title, not in the name “whatsapp”
Lowonyxmetrics.techscore 20· active website
brand in page title, not in the name “linkedin”
Lowquantumcrm.techscore 20· blocked the probe
brand in page title, not in the name “chatgpt”
Lowregone.techscore 20· active website
brand in page title, not in the name “whatsapp”
Lowscalemaster.techscore 20· active website
brand in page title, not in the name “instagram”
Lowsignsofintelligence.techscore 20· active website
brand in page title, not in the name “zoom”
Lowsoundauth.techscore 20· server error
brand in page title, not in the name “cloudflare”
Lowspelers.techscore 20· active website
brand in page title, not in the name “whatsapp”
Lowtravaio.techscore 20· active website
brand in page title, not in the name “booking”
Lowuuxie.techscore 20· server error
brand in page title, not in the name “cloudflare”
Lowtacticalsupportservices.techscore 18· empty page
lure words (login, verify, secure…) “service,services,support”
Lowxn--attilatmr-71a4k.techscore 18· boilerplate page
punycode name “attilatímár scripts=LATIN”
Lowcobadaily.techscore 14· active website
login form “has_form+login words”
Lowcognixant.techscore 14· parked, for sale
login form “has_form+login words”
Lowinfreelancer.techscore 14· active website
page pushes urgent payment “act Now”
Lowkevq.techscore 14· active website
login form “has_form+login words”
Lowmundialibrary.techscore 14· active website
login form “has_form+login words”
Lowrelaycrm.techscore 14· blocked the probe
login form “has_form+login words”
Lowtosslead.techscore 14· active website
login form “has_form+login words”
Lowhultprizesams.techscore 12· active website
lure words (login, verify, secure…) “prize,prizes”
Lowreceptionservices.techscore 12· empty page
lure words (login, verify, secure…) “service,services”
Lowi-have-no-idea-what-i-am-doing.techscore 10· empty page
many hyphens “7”very long name “30”

Same data as JSON: /api/zone/risk?day=2026-10-05&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.