Flagged newborn domains, Thursday, October 8, 2026

10 names at tier medium or above in .cloud, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:10-17 10-16 10-15 10-13 10-10 10-09 10-08 10-07 10-06 10-05 clear filters

Criticalamazonapiwebservices.cloudscore 68echoes amazon· active website

brand in the name “amazon”lure words (login, verify, secure…) “service,services”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks like abuse (target: Amazon Web Services), confidence 93%. An opinion, not a finding.

Highde-central-1consoleawsamazon.cloudscore 55echoes amazon· redirects elsewhere

brand in the name “amazon”very long name “28”brand plus digits “de-central-1consoleawsamazon”brand in page title, not in the name “google”+2 more

Model opinion: looks like abuse (target: Amazon Web Services), confidence 80%. An opinion, not a finding.

Highfinance-auth-gateway-prod-connects.cloudscore 55echoes binance· no web server

one-letter brand typo “finance≈binance”lure words (login, verify, secure…) “auth”many hyphens “4”very long name “34”

Highfinance-swap-services-api-auth.cloudscore 55echoes binance· no web server

one-letter brand typo “finance≈binance”lure words (login, verify, secure…) “auth,service,services”many hyphens “4”very long name “30”

Highnl-de-central-2consoleawsamazon.cloudscore 55echoes amazon· empty page

brand in the name “amazon”many hyphens “3”very long name “31”brand plus digits “nl-de-central-2consoleawsamazon”+2 more

Model opinion: looks like phishing (target: Amazon Web Services), confidence 82%. An opinion, not a finding.

Highcosco-shipping.cloudscore 44echoes costco· redirects elsewhere

one-letter brand typo “cosco≈costco”brand name at a retail registrar “Tucows Domains Inc.”brand name redirects elsewhere “coscoshipping.com”

Model opinion: suspicious (target: COSCO Shipping Lines), confidence 72%. An opinion, not a finding.

Mediumoficinaosbr.cloudscore 38· active website

brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Mediumunloved.cloudscore 38· active website

brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Mediumsa-finance.cloudscore 36echoes binance· active website

one-letter brand typo “finance≈binance”brand name at a retail registrar “OVH sas”

Mediummaximilianokolbe.cloudscore 30· registrar placeholder

brand in page title, not in the name “hostinger”identical page on many newborns “95 identical pages”

Same data as JSON: /api/zone/risk?day=2026-10-08&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.