Flagged newborn domains, Thursday, October 8, 2026

8 names at tier low or above in .blog, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalhdmovie2a.blogscore 60· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 93%. An opinion, not a finding.

Highusps-us.blogscore 55echoes usps· redirects elsewhere
brand in the name “usps”brand name at a retail registrar “Porkbun, LLC”brand name at a watch-list registrar “Porkbun, LLC”brand in page title, not in the name “google”+2 more

Model opinion: looks like abuse (target: USPS), confidence 80%. An opinion, not a finding.

Mediumgooglesite.blogscore 38echoes google· active website
brand in the name “google”brand name at a retail registrar “Automattic Inc.”
Mediumornaplaster.blogscore 38· redirects elsewhere
brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”
Mediumrussia-heroes.blogscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumwhatssapp.blogscore 36echoes whatsapp· no DNS
one-letter brand typo “whatssapp≈whatsapp”brand name at a retail registrar “Go Daddy, LLC”
Mediumcaraccessories.blogscore 26· active website
lure words (login, verify, secure…) “access”brand in page title, not in the name “wordpress”
Lowvertexinvestment.blogscore 22· active website
page impersonates a brand “Binance”

Same data as JSON: /api/zone/risk?day=2026-10-08&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.