Flagged newborn domains, Wednesday, October 7, 2026

38 names at tier medium or above in .sbs, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highamazion.sbsscore 52echoes amazon· boilerplate page
one-letter brand typo “amazion≈amazon”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”brand name redirects elsewhere “amazion.cc”
Highlogin-de.sbsscore 52· blocked the probe
lure words (login, verify, secure…) “login”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highjikeyuncloud.sbsscore 50· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Highqytjc.sbsscore 50· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Highshanshuiyuncloud.sbsscore 50· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highframelabsk.sbsscore 46· active website
TLD with a high abuse rate “sbs”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 81%. An opinion, not a finding.

Highmancubaattit.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “shopify”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 65%. An opinion, not a finding.

Highsharepointoffficewwork.sbsscore 44echoes sharepoint· not probed yet
brand in the name “sharepoint”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”
Mediumstoremy.sbsscore 38· registrar placeholder
TLD with a high abuse rate “sbs”brand in page title, not in the name “hostinger”identical page on many newborns “114 identical pages”
Mediumsweetsymbolsaga.sbsscore 38echoes etsy· boilerplate page
brand in the name “etsy”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”identical page on many newborns “28 identical pages”
Medium1xbet-casino-login.sbsscore 34· blocked the probe
lure words (login, verify, secure…) “login”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumbumperaccountpierce58.sbsscore 34· blocked the probe
lure words (login, verify, secure…) “account”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumhongxincloud.sbsscore 30· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”
Mediumshanhucloud.sbsscore 30· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”
Mediumbeautifullobbysong81.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumeerlijkpeil.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumextsesnhioscontgstr.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumfacilitytech.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumgreekassureavoid48.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumhishaboton.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumikimisliamp2.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumkilowabayi.sbsscore 28· active website
TLD with a high abuse rate “sbs”brand in page title, not in the name “namecheap”
Mediumkryptonclient.sbsscore 28· server error
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumlayerkijijirefuse37.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumlucknawomen62.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumpersonalscutmeans24.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumppemarcin.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumprospernage.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumrabotaru-2322.sbsscore 28· active website
TLD with a high abuse rate “sbs”brand in page title, not in the name “telegram”
Mediumreugnis.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumrijkkompas.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumsensecommitteesoutheast47.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumtalkuta.sbsscore 28· boilerplate page
TLD with a high abuse rate “sbs”brand in page title, not in the name “telegram”
Mediumtechcare.sbsscore 28· empty page
TLD with a high abuse rate “sbs”brand in page title, not in the name “booking”
Mediumvienalsk.sbsscore 28· active website
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”
Mediumwarfuso.sbsscore 28· boilerplate page
TLD with a high abuse rate “sbs”brand in page title, not in the name “telegram”
Mediumwrtfailures51.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumsecure-verify-login.sbsscore 26· empty page
lure words (login, verify, secure…) “login,secure,verify”TLD with a high abuse rate “sbs”

Same data as JSON: /api/zone/risk?day=2026-10-07&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.