Flagged newborn domains, Saturday, October 10, 2026

37 names at tier medium or above in .click, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalbooking-807364.clickscore 66echoes booking· active website
brand in the name “booking”brand plus digits “booking-807364”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: looks like phishing (target: Yandex (Yandex Realty / Яндекс Аренда)), confidence 93%. An opinion, not a finding.

Highwww-google.clickscore 59echoes google· active website
brand in the name “google”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “google”

Model opinion: looks like abuse (target: Google), confidence 82%. An opinion, not a finding.

Highamozon-ai.clickscore 55echoes amazon· not probed yet
one-letter brand typo “amozon≈amazon”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”+1 more
Highfinance-profit-bot.clickscore 55echoes binance· not probed yet
one-letter brand typo “finance≈binance”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Highfinance-zxg.clickscore 55echoes binance· boilerplate page
one-letter brand typo “finance≈binance”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NAMECHEAP”+1 more

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highteleg-support.clickscore 52· redirects elsewhere
lure words (login, verify, secure…) “support”TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Telegram), confidence 70%. An opinion, not a finding.

Highapple-cloud.clickscore 50echoes apple· active website
ambiguous brand word “apple”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”+2 more

Model opinion: looks like abuse (target: Apple), confidence 74%. An opinion, not a finding.

Highplay-googie.clickscore 50echoes google· active website
one-letter brand typo “googie≈google”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Registrar.eu”

Model opinion: looks like abuse (target: Google Play), confidence 82%. An opinion, not a finding.

Highbaoenglishlab.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 86%. An opinion, not a finding.

Highreservation-center-2026.clickscore 46· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highrnultisoftonic.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “ebay”form on a brand-styled page “has_form”
Highteleg-orgo.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Telegram), confidence 60%. An opinion, not a finding.

Highteleg-rf.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 40%. An opinion, not a finding.

Highteleg-roud.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 42%. An opinion, not a finding.

Highteleg-round.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 42%. An opinion, not a finding.

Highteleg-ru.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Telegram), confidence 62%. An opinion, not a finding.

Highteleg-rus.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 44%. An opinion, not a finding.

Highteleg-sup-ort.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Telegram), confidence 80%. An opinion, not a finding.

Highteleg-sup.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Telegram), confidence 70%. An opinion, not a finding.

Highteleg-suport.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Telegram), confidence 77%. An opinion, not a finding.

Medium331-432-189.clickscore 28· empty page
TLD with a high abuse rate “click”brand in page title, not in the name “shopee”
Mediumborovy-link.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “telegram”
Mediumclearcontext.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “chatgpt”
Mediumcuansloto.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumdaemon.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “robinhood”
Mediumeventia.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “whatsapp”
Mediumgreenpplevit.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumkontozuprufz.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumoplab.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumpapi.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “whatsapp”
Mediumqantaserewards.clickscore 28· boilerplate page
lure words (login, verify, secure…) “reward,rewards”TLD with a high abuse rate “click”free DNS provider “dnsowl.com”
Mediumqantasrewardsnow.clickscore 28· boilerplate page
lure words (login, verify, secure…) “reward,rewards”TLD with a high abuse rate “click”free DNS provider “dnsowl.com”
Mediumqantasurewardsaus.clickscore 28· boilerplate page
lure words (login, verify, secure…) “reward,rewards”TLD with a high abuse rate “click”free DNS provider “dnsowl.com”
Mediumqr360.clickscore 28· other
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumsutbongtv.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumtenebrarum.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “wordpress”
Mediumck444loginpassword.clickscore 25· no DNS
lure words (login, verify, secure…) “login,password”random-looking name “H=3.68”TLD with a high abuse rate “click”

Same data as JSON: /api/zone/risk?day=2026-10-10&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.