Flagged newborn domains, Saturday, October 10, 2026

126 names at tier low or above in .click, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalbooking-807364.clickscore 66echoes booking· active website
brand in the name “booking”brand plus digits “booking-807364”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: looks like phishing (target: Yandex (Yandex Realty / Яндекс Аренда)), confidence 93%. An opinion, not a finding.

Highwww-google.clickscore 59echoes google· active website
brand in the name “google”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “google”

Model opinion: looks like abuse (target: Google), confidence 82%. An opinion, not a finding.

Highamozon-ai.clickscore 55echoes amazon· not probed yet
one-letter brand typo “amozon≈amazon”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”+1 more
Highfinance-profit-bot.clickscore 55echoes binance· not probed yet
one-letter brand typo “finance≈binance”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Highfinance-zxg.clickscore 55echoes binance· boilerplate page
one-letter brand typo “finance≈binance”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NAMECHEAP”+1 more

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highteleg-support.clickscore 52· redirects elsewhere
lure words (login, verify, secure…) “support”TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Telegram), confidence 70%. An opinion, not a finding.

Highapple-cloud.clickscore 50echoes apple· active website
ambiguous brand word “apple”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”+2 more

Model opinion: looks like abuse (target: Apple), confidence 74%. An opinion, not a finding.

Highplay-googie.clickscore 50echoes google· active website
one-letter brand typo “googie≈google”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Registrar.eu”

Model opinion: looks like abuse (target: Google Play), confidence 82%. An opinion, not a finding.

Highbaoenglishlab.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 86%. An opinion, not a finding.

Highreservation-center-2026.clickscore 46· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highrnultisoftonic.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “ebay”form on a brand-styled page “has_form”
Highteleg-orgo.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Telegram), confidence 60%. An opinion, not a finding.

Highteleg-rf.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 40%. An opinion, not a finding.

Highteleg-roud.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 42%. An opinion, not a finding.

Highteleg-round.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 42%. An opinion, not a finding.

Highteleg-ru.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Telegram), confidence 62%. An opinion, not a finding.

Highteleg-rus.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 44%. An opinion, not a finding.

Highteleg-sup-ort.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Telegram), confidence 80%. An opinion, not a finding.

Highteleg-sup.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Telegram), confidence 70%. An opinion, not a finding.

Highteleg-suport.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Telegram), confidence 77%. An opinion, not a finding.

Medium331-432-189.clickscore 28· empty page
TLD with a high abuse rate “click”brand in page title, not in the name “shopee”
Mediumborovy-link.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “telegram”
Mediumclearcontext.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “chatgpt”
Mediumcuansloto.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumdaemon.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “robinhood”
Mediumeventia.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “whatsapp”
Mediumgreenpplevit.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumkontozuprufz.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumoplab.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumpapi.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “whatsapp”
Mediumqantaserewards.clickscore 28· boilerplate page
lure words (login, verify, secure…) “reward,rewards”TLD with a high abuse rate “click”free DNS provider “dnsowl.com”
Mediumqantasrewardsnow.clickscore 28· boilerplate page
lure words (login, verify, secure…) “reward,rewards”TLD with a high abuse rate “click”free DNS provider “dnsowl.com”
Mediumqantasurewardsaus.clickscore 28· boilerplate page
lure words (login, verify, secure…) “reward,rewards”TLD with a high abuse rate “click”free DNS provider “dnsowl.com”
Mediumqr360.clickscore 28· other
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumsutbongtv.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumtenebrarum.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “wordpress”
Mediumck444loginpassword.clickscore 25· no DNS
lure words (login, verify, secure…) “login,password”random-looking name “H=3.68”TLD with a high abuse rate “click”
lure words (login, verify, secure…) “official”many hyphens “4”very long name “32”TLD with a high abuse rate “click”
Lowcuahangtienloi3.clickscore 22· active website
TLD with a high abuse rate “click”page pushes urgent payment “Congratulations You”
Lowsifedexava.clickscore 22echoes fedex· not probed yet
brand in the name “fedex”TLD with a high abuse rate “click”
Lowtronverifynow.clickscore 22· no DNS
lure words (login, verify, secure…) “verify”lure suffix “tronverifynow”TLD with a high abuse rate “click”
Lowacumenconsultingservices.clickscore 20· active website
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “click”
Lowadaptconsultingservices.clickscore 20· not probed yet
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “click”
Lowing-rewards1.clickscore 20· no web server
lure words (login, verify, secure…) “reward,rewards”TLD with a high abuse rate “click”
Lowpointconsultingservices.clickscore 20· active website
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “click”
Lowrecoveryback.clickscore 20· boilerplate page
lure words (login, verify, secure…) “recover,recovery”TLD with a high abuse rate “click”
Lowreliableconsultservices.clickscore 20· active website
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “click”
many hyphens “4”very long name “39”TLD with a high abuse rate “click”
Low1228888.clickscore 16· active website
TLD with a high abuse rate “click”free DNS provider “dnsowl.com”
Low1qwd9s99.clickscore 16· empty page
TLD with a high abuse rate “click”free DNS provider “dnsowl.com”

Same data as JSON: /api/zone/risk?day=2026-10-10&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.