Flagged newborn domains, Thursday, October 8, 2026

127 names at tier low or above in .click, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalintesatradeai.clickscore 62echoes intesa· active website
brand in the name “intesa”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 88%. An opinion, not a finding.

Highfidelityaiera.clickscore 55echoes fidelity· not probed yet
brand in the name “fidelity”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”+1 more
Highfidelityaiinsights.clickscore 55echoes fidelity· not probed yet
brand in the name “fidelity”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”+1 more
Highgratfyxbox.clickscore 55echoes xbox· empty page
brand in the name “xbox”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”+1 more

Model opinion: looks like abuse (target: Xbox (Microsoft)), confidence 60%. An opinion, not a finding.

Highopenaiconcepts.clickscore 55echoes openai· not probed yet
brand in the name “openai”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”+1 more
Highrevolut-casino.clickscore 55echoes revolut· no DNS
brand in the name “revolut”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Hightrust-wallets-cards-club.clickscore 55echoes trustwallet· not probed yet
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”many hyphens “3”TLD with a high abuse rate “click”+1 more
Highprotonedrive.clickscore 52echoes onedrive· active website
brand in the name “onedrive”TLD with a high abuse rate “click”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks like abuse (target: Proton Drive (Proton AG) / Microsoft OneDrive), confidence 70%. An opinion, not a finding.

Hightiktok-to-samoe.clickscore 52echoes tiktok· active website
brand in the name “tiktok”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Registrar.eu”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

High9yuncloud.clickscore 50· active website
TLD with a high abuse rate “click”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 65%. An opinion, not a finding.

Higharamexpost.clickscore 46echoes aramex· boilerplate page
brand in the name “aramex”TLD with a high abuse rate “click”brand name at a retail registrar “NameMart Pte. Ltd.”

Model opinion: looks like abuse (target: Aramex), confidence 80%. An opinion, not a finding.

Highattendance-system.clickscore 46· active website
TLD with a high abuse rate “click”brand in page title, not in the name “workday”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highcheck-crypto.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highdeshibazar.clickscore 46· active website
TLD with a high abuse rate “click”brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highpralzenok.clickscore 46· active website
TLD with a high abuse rate “click”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highpruzvalet.clickscore 46· active website
TLD with a high abuse rate “click”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Highsc-adf.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 53%. An opinion, not a finding.

Highsjkfvcjdjcii.clickscore 46· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Highvlornavik.clickscore 46· active website
TLD with a high abuse rate “click”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 69%. An opinion, not a finding.

Highvultr-cloud.clickscore 44echoes icloud· no web server
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “click”brand name at a retail registrar “GMO Internet, Inc. d/b/a Onamae.com”
Mediumvidaplena.clickscore 38· registrar placeholder
TLD with a high abuse rate “click”brand in page title, not in the name “hostinger”identical page on many newborns “95 identical pages”
Mediumcereseto.clickscore 34· blocked the probe
lure words (login, verify, secure…) “reset”TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumpodandpiplimited.clickscore 34· active website
lure words (login, verify, secure…) “limited”TLD with a high abuse rate “click”brand in page title, not in the name “google”
Mediumsicheresportalkunden.clickscore 34· blocked the probe
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumgaypornstudio.clickscore 33· active website
TLD with a high abuse rate “click”nameserver domain born the same day “xxxlab.click”
Mediumgayxxxland.clickscore 33· active website
TLD with a high abuse rate “click”nameserver domain born the same day “xxxlab.click”
Medium1xbet-wingo-site.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumarchpadx.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “robinhood”
Mediumbigo234crv.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumdtuan.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “apple”
Mediumelang-varnixa.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “whatsapp”
Mediumempresasatualizar.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumempresaspresente.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumgolgremgryt.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “booking”
Mediumgramklim.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “ledger”
Mediuminstaboost.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “instagram”
Mediumjoja.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “amazon”
Mediumkaptensloter.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumlink-halo-gacor.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumlink-halo-game.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumlink-halo-oke.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumlink-halo-terbaru.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumlink-halo-top.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumlink-halo-uhuy.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediummabeguayaquil.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “whatsapp”
Mediumnyttyt.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “booking”
Mediumpanen123jkpt.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumpresenteempresas.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumqantasrewardsaue.clickscore 28· boilerplate page
lure words (login, verify, secure…) “reward,rewards”TLD with a high abuse rate “click”free DNS provider “dnsowl.com”
Mediumstutor.clickscore 28· server error
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”

Same data as JSON: /api/zone/risk?day=2026-10-08&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.