Flagged newborn domains, Thursday, October 8, 2026

52 names at tier medium or above in .sbs, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalxinweicloud.sbsscore 86echoes icloud· active website
brand in the name “icloud”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”page impersonates a brand “Netflix”+1 more

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highamazonyyt.sbsscore 55echoes amazon· empty page
brand in the name “amazon”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more

Model opinion: looks like abuse (target: Amazon), confidence 70%. An opinion, not a finding.

Highdoctsign.sbsscore 55echoes docusign· not probed yet
one-letter brand typo “doctsign≈docusign”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Highlloydssupport.sbsscore 55echoes lloyds· robots.txt denied
brand in the name “lloyds”lure words (login, verify, secure…) “support”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”+2 more
Highmicros0ft-soportive.sbsscore 55echoes microsoft· server error
brand spelled with digits “micros0ft-soportive→microsoft”brand plus digits “micros0ft-soportive”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks like abuse (target: Microsoft), confidence 80%. An opinion, not a finding.

Highrakutencard.sbsscore 55echoes rakuten· no DNS
brand in the name “rakuten”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Hightelegramchatx.sbsscore 55echoes telegram· robots.txt denied
brand in the name “telegram”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Highusadocxbox.sbsscore 55echoes xbox· not probed yet
brand in the name “xbox”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Highportalpjclientecorporativ.sbsscore 52· redirects elsewhere
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 70%. An opinion, not a finding.

Highswiftcargo.sbsscore 52· active website
TLD with a high abuse rate “sbs”page asks for credentials “sign in to your account”login form “has_form+login words”

Model opinion: looks benign, confidence 71%. An opinion, not a finding.

Highwazhuayun.sbsscore 50· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highxiongmaoyun.sbsscore 50· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”brand in page title, not in the name “tiktok”

Model opinion: looks benign, confidence 65%. An opinion, not a finding.

Highyunfanjichang.sbsscore 50· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highaeqespolkc.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 47%. An opinion, not a finding.

Highomqespolkc.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 45%. An opinion, not a finding.

Highonline-vvbbkkk.sbsscore 46· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highqaqespolkc.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highwatthaidhammaram.sbsscore 46· active website
TLD with a high abuse rate “sbs”brand in page title, not in the name “gmail”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 87%. An opinion, not a finding.

Mediumbuymarket.sbsscore 38· registrar placeholder
TLD with a high abuse rate “sbs”brand in page title, not in the name “hostinger”identical page on many newborns “95 identical pages”
Mediumgalaxa.sbsscore 38· registrar placeholder
TLD with a high abuse rate “sbs”brand in page title, not in the name “hostinger”identical page on many newborns “95 identical pages”
Mediumjacksonmoreiradeaguilar.sbsscore 38· registrar placeholder
TLD with a high abuse rate “sbs”brand in page title, not in the name “hostinger”identical page on many newborns “95 identical pages”
Mediumlogin-1xbet-online.sbsscore 34· blocked the probe
lure words (login, verify, secure…) “login”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumexclusivelybehaviourshipped47.sbsscore 32· blocked the probe
very long name “29”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumdoraemona.sbsscore 30· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”
Mediumwgetyun.sbsscore 30· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Apple ID”
Medium1xbet-wingo-site.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumallwrksfrthnn.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumallxgdrefsb.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumauthorizedsbcompile60.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumbitterritoriescricket27.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumcloaknetwork.sbsscore 28· active website
TLD with a high abuse rate “sbs”brand in page title, not in the name “robinhood”
Mediumconsumerssellerstrain73.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumcoolmoviez.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumdhsssrasc.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumdigitalbeneficios.sbsscore 28· active website
TLD with a high abuse rate “sbs”brand in page title, not in the name “namecheap”
Mediumeixjichang.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “netflix”
Mediumferreteriacrediservir.sbsscore 28· active website
TLD with a high abuse rate “sbs”brand in page title, not in the name “whatsapp”
Mediumjanvike.sbsscore 28· boilerplate page
TLD with a high abuse rate “sbs”brand in page title, not in the name “telegram”
Mediumjiaochan.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumkolombo.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumoverwhelmed.sbsscore 28· server error
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumraiseoldiraqi81.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumreservedplannedscotland78.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumrocketpaintworks.sbsscore 28· active website
TLD with a high abuse rate “sbs”brand in page title, not in the name “steam”
Mediumsaskida.sbsscore 28· boilerplate page
TLD with a high abuse rate “sbs”brand in page title, not in the name “telegram”
Mediumstichandfit.sbsscore 28· active website
TLD with a high abuse rate “sbs”brand in page title, not in the name “whatsapp”
Mediumsummerspringrecommended30.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumtagjichang.sbsscore 28· active website
TLD with a high abuse rate “sbs”brand in page title, not in the name “chatgpt”
Mediumtirvage.sbsscore 28· boilerplate page
TLD with a high abuse rate “sbs”brand in page title, not in the name “telegram”
Mediumvyaparhub.sbsscore 28· active website
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”

Same data as JSON: /api/zone/risk?day=2026-10-08&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.