Flagged newborn domains, Saturday, October 10, 2026

107 names at tier low or above in .sbs, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalbvva-mobile.sbsscore 80echoes tmobile· active website
one-letter brand typo “mobile≈tmobile”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “bbva”+1 more

Model opinion: looks like phishing (target: Garanti BBVA), confidence 88%. An opinion, not a finding.

Criticalfinance-profit-bot.sbsscore 60echoes binance· active website
one-letter brand typo “finance≈binance”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 90%. An opinion, not a finding.

Highlcloud-web.sbsscore 55echoes icloud· no DNS
one-letter brand typo “lcloud≈icloud”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Highopensi.sbsscore 55echoes openai· robots.txt denied
one-letter brand typo “opensi≈openai”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Highlazadatoto.sbsscore 52echoes lazada· not probed yet
brand in the name “lazada”TLD with a high abuse rate “sbs”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highmiwutongvpn.sbsscore 50· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks like abuse (target: Geph (迷雾通)), confidence 55%. An opinion, not a finding.

Highbvva-application.sbsscore 46· active website
TLD with a high abuse rate “sbs”brand in page title, not in the name “bbva”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Garanti BBVA), confidence 88%. An opinion, not a finding.

Highbvva-mobileapp.sbsscore 46· active website
TLD with a high abuse rate “sbs”brand in page title, not in the name “bbva”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Garanti BBVA), confidence 86%. An opinion, not a finding.

Highnovobanc.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 52%. An opinion, not a finding.

Highshivamkumargupta.sbsscore 46· active website
TLD with a high abuse rate “sbs”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 99%. An opinion, not a finding.

Highofficialonlinechannel.sbsscore 44· registrar placeholder
lure words (login, verify, secure…) “official”TLD with a high abuse rate “sbs”brand in page title, not in the name “hostinger”identical page on many newborns “94 identical pages”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highfolioicloudinfo.sbsscore 42echoes icloud· no DNS
brand in the name “icloud”TLD with a high abuse rate “sbs”brand name on a rarely-seen nameserver “myhostdns-ia.pro”brand name at a retail registrar “NameSilo, LLC”+1 more
Highjisicloudyun.sbsscore 42echoes icloud· active website
brand in the name “icloud”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Mediumunauthorizedconnectionnissan27.sbsscore 32· blocked the probe
very long name “30”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumbaiyueguangjc.sbsscore 30· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”
Medium1alternatifsakura.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Medium1st-hitclub.sbsscore 28· server error
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumcontrollingsmokemotorola90.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumdarrulo.sbsscore 28· empty page
TLD with a high abuse rate “sbs”brand in page title, not in the name “telegram”
Mediumdonortryeligible43.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumecothatscool14.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumfonvufa.sbsscore 28· empty page
TLD with a high abuse rate “sbs”brand in page title, not in the name “telegram”
Mediumjuicecantdiscrimination27.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediummhrsyildiz.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumnexusarena.sbsscore 28· active website
TLD with a high abuse rate “sbs”brand in page title, not in the name “robinhood”
Mediumporkbean.sbsscore 28· active website
TLD with a high abuse rate “sbs”brand in page title, not in the name “dropbox”
Mediumrunpaxe.sbsscore 28· empty page
TLD with a high abuse rate “sbs”brand in page title, not in the name “telegram”
Mediumsalesqualifyd.sbsscore 28· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “whatsapp”
Mediumviolentearthquakecooking49.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Lowjpmax288.sbsscore 22· active website
TLD with a high abuse rate “sbs”login form “has_form+login words”
Lowbeaconbizservices.sbsscore 20· not probed yet
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “sbs”
Lowrecoveryback.sbsscore 20· boilerplate page
lure words (login, verify, secure…) “recover,recovery”TLD with a high abuse rate “sbs”
Lowpererozhdenie-v-slyz-lordserial.sbsscore 18· active website
many hyphens “3”very long name “31”TLD with a high abuse rate “sbs”
Lowaroperations.sbsscore 16· robots.txt denied
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowbembed.sbsscore 16· empty page
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowcard8.sbsscore 16· robots.txt denied
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowcasino116.sbsscore 16· boilerplate page
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowcasino14.sbsscore 16· boilerplate page
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowdonow.sbsscore 16· no DNS
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowdorkk.sbsscore 16· robots.txt denied
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Loweavzpaet.sbsscore 16· boilerplate page
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowggmatifqr.sbsscore 16· robots.txt denied
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowinboxnest.sbsscore 16· robots.txt denied
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowinboxpilot.sbsscore 16· robots.txt denied
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowitalo-rent.sbsscore 16· robots.txt denied
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowjetton-go.sbsscore 16· boilerplate page
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowjilitg.sbsscore 16· active website
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowjilitg2020.sbsscore 16· active website
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowladyhomes.sbsscore 16· robots.txt denied
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowmailbloom.sbsscore 16· robots.txt denied
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”

Same data as JSON: /api/zone/risk?day=2026-10-10&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.