Flagged newborn domains, Tuesday, October 13, 2026

838 names at tier high or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalwalmartaccess.sitescore 100echoes walmart· active website
brand in the name “walmart”lure words (login, verify, secure…) “access”page impersonates a brand “PayPal”brand name and brand-styled page “walmart”+1 more

Model opinion: looks like phishing (target: Walmart), confidence 95%. An opinion, not a finding.

Criticalbuyoutlookaccounts.comscore 85echoes outlook· active website
brand in the name “outlook”lure words (login, verify, secure…) “account,accounts”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “outlook”+1 more

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Criticalfidelitywallet.appscore 77echoes fidelity· active website
brand in the name “fidelity”lure words (login, verify, secure…) “wallet”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “fidelity”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Criticalgecetsy.comscore 77echoes etsy· active website
brand in the name “etsy”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand name and brand-styled page “etsy”+1 more

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Criticaltrustwallets.shopscore 74echoes trustwallet· active website
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Trust Wallet), confidence 93%. An opinion, not a finding.

Criticalcoinbasellyinvest.livescore 72echoes coinbase· active website
brand in the name “coinbase”page impersonates a brand “Coinbase”brand in page title, not in the name “outlook”

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Criticalfidelitycrestcapital.clickscore 70echoes fidelity· active website
brand in the name “fidelity”TLD with a high abuse rate “click”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”+1 more

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Criticalamazon-invest.onlinescore 69echoes amazon· active website
brand in the name “amazon”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “amazon”form on a brand-styled page “has_form”

Model opinion: looks like a scam (target: Amazon), confidence 86%. An opinion, not a finding.

Criticalamazonhaul.storescore 69echoes amazon· active website
brand in the name “amazon”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “amazon”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 77%. An opinion, not a finding.

Criticalshadowrocketapp.wikiscore 68· active website
free DNS provider “dnsowl.com”page impersonates a brand “Apple ID”brand in page title, not in the name “apple”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Shadowrocket), confidence 65%. An opinion, not a finding.

Criticalpaypalcredit.onlinescore 67echoes paypal· active website
brand in the name “paypal”page impersonates a brand “PayPal”brand name and brand-styled page “paypal”

Model opinion: looks like phishing (target: PayPal), confidence 93%. An opinion, not a finding.

Criticallinkedyn.spacescore 66echoes linkedin· active website
one-letter brand typo “linkedyn≈linkedin”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: LinkedIn), confidence 60%. An opinion, not a finding.

Criticaladobedobe.sitescore 64echoes adobe· active website
brand in the name “adobe”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand in page title, not in the name “namecheap”

Model opinion: suspicious (target: Adobe), confidence 55%. An opinion, not a finding.

Criticaltiktokadsmanager.sitescore 63echoes tiktok· active website
brand in the name “tiktok”brand name and brand-styled page “tiktok”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: TikTok), confidence 95%. An opinion, not a finding.

Criticaltw-rakuten.shopscore 63echoes rakuten· active website
brand in the name “rakuten”brand name and brand-styled page “rakuten”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Rakuten), confidence 88%. An opinion, not a finding.

Criticalvanguarddigital.worldscore 63echoes vanguard· active website
brand in the name “vanguard”brand name and brand-styled page “vanguard”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 86%. An opinion, not a finding.

Criticalfedexcargo.deliveryscore 62echoes fedex· active website
brand in the name “fedex”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”form on a brand-styled page “has_form”

Model opinion: looks like a scam (target: FedEx), confidence 65%. An opinion, not a finding.

Criticalicloudlinux.techscore 62echoes icloud· active website
brand in the name “icloud”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 70%. An opinion, not a finding.

Criticalrobinhoodin.sitescore 62echoes robinhood· active website
brand in the name “robinhood”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Criticaltheaccounts.appscore 62· active website
lure words (login, verify, secure…) “account,accounts”page asks for credentials “sign in to your account”brand in page title, not in the name “google”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Criticalaboly.orgscore 60· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Criticalbusinessfiles.topscore 60· active website
TLD with a high abuse rate “top”page asks for credentials “Sign in to your account”page impersonates a brand “Microsoft 365”

Model opinion: looks like phishing (target: Microsoft), confidence 96%. An opinion, not a finding.

Criticalcloud-notch.spacescore 60echoes icloud· active website
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Criticaleduk-ai.orgscore 60· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Criticalfirstgatemicrogroup.onlinescore 60· active website
page impersonates a brand “Chase Bank”brand in page title, not in the name “chase”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Chase), confidence 80%. An opinion, not a finding.

Criticalmp4tube.mobiscore 60· active website
page impersonates a brand “Netflix”brand in page title, not in the name “amazon”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.

Criticalmybingeworld.comscore 60· active website
page impersonates a brand “Netflix”brand in page title, not in the name “apple”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Criticalorangemor.onlinescore 60· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”form on a brand-styled page “has_form”

Model opinion: suspicious (target: Microsoft), confidence 60%. An opinion, not a finding.

Criticalpaigeashlyn.orgscore 60· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 68%. An opinion, not a finding.

Criticalpebll.bestscore 60· active website
page impersonates a brand “DHL”brand in page title, not in the name “apple”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Pebbl), confidence 60%. An opinion, not a finding.

Criticalplugglewp.storescore 60· active website
page impersonates a brand “PayPal”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 74%. An opinion, not a finding.

Criticalsaledigital.sitescore 60· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.

Criticalsinapsia.agencyscore 60· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Criticaltotal-calendar.comscore 60· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “icloud”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Criticaltrychaching.appscore 60· active website
page impersonates a brand “paypal”brand in page title, not in the name “paypal”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Criticalvanchuyenquocte.onlinescore 60· active website
page impersonates a brand “FedEx”brand in page title, not in the name “fedex”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticalventurox-finance.xyzscore 60echoes binance· active website
one-letter brand typo “finance≈binance”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 90%. An opinion, not a finding.

Highlethalapeexperienceroblox.wikiscore 59echoes roblox· active website
brand in the name “roblox”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”brand name and brand-styled page “roblox”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highpetstoretycoon-roblox.wikiscore 59echoes roblox· active website
brand in the name “roblox”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”brand name and brand-styled page “roblox”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highrobloxpastebin.orgscore 59echoes roblox· active website
brand in the name “roblox”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand name and brand-styled page “roblox”

Model opinion: looks like abuse (target: Roblox), confidence 60%. An opinion, not a finding.

Highvanguardprogram.orgscore 59echoes vanguard· active website
brand in the name “vanguard”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”brand name and brand-styled page “vanguard”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Highwrongwayroblox.wikiscore 59echoes roblox· active website
brand in the name “roblox”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”brand name and brand-styled page “roblox”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highrevolutionperminute.orgscore 58echoes revolut· active website
brand in the name “revolut”brand name at a retail registrar “OVH sas”brand in page title, not in the name “wordpress”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Hightabletoslack.appscore 58echoes slack· active website
brand in the name “slack”brand name at a retail registrar “OVH sas”brand in page title, not in the name “google”

Model opinion: looks benign, confidence 77%. An opinion, not a finding.

Highwe8ay.shopscore 57echoes ebay· active website
brand spelled with digits “we8ay→ebay”brand plus digits “we8ay”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks like abuse (target: eBay), confidence 60%. An opinion, not a finding.

Highamazon16888.qponscore 56echoes amazon· active website
brand in the name “amazon”brand plus digits “amazon16888”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Amazon), confidence 85%. An opinion, not a finding.

Highcibcafrance.cfdscore 56echoes cibc· active website
brand in the name “cibc”TLD with a high abuse rate “cfd”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Higheast-gippsland-mobile-detailing.comscore 56echoes tmobile· active website
one-letter brand typo “mobile≈tmobile”many hyphens “3”very long name “31”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highgooglemeet.lolscore 56echoes google· active website
brand in the name “google”TLD with a high abuse rate “lol”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Google), confidence 80%. An opinion, not a finding.

Highgrabyourgift.livescore 56· active website
page impersonates a brand “PayPal”page pushes urgent payment “Limited Time Offer”brand in page title, not in the name “paypal”

Model opinion: looks like a scam, confidence 90%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-13&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.