Flagged newborn domains, Tuesday, October 13, 2026

30 names at tier low or above in .website, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highsignaleye.websitescore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “telegram”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Mediumdeedscan.websitescore 38· active website
brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”
Mediumloadings.websitescore 38· blocked the probe
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Mediumstormscale.websitescore 38· active website
brand in page title, not in the name “anthropic”form on a brand-styled page “has_form”
Mediumsuppport.websitescore 38· blocked the probe
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Mediumtiktokai.websitescore 38echoes tiktok· empty page
brand in the name “tiktok”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumvwvw.websitescore 38· blocked the probe
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Mediumwpsite911.websitescore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Mediumyourhealth-daily.websitescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Lowxn--4gqwbu44czhc7w9a66k.websitescore 23· not probed yet
punycode name “世界一流大学 scripts=CJK”random-looking name “H=3.88”
Lowxn--vjq463ax3ub4cl0nhw4a.websitescore 23· blocked the probe
punycode name “阿离的自习室 scripts=CJK”random-looking name “H=3.88”
Lowdotf.websitescore 22· active website
page impersonates a brand “COINBASE”
Low12placex.websitescore 20· active website
brand in page title, not in the name “namecheap”
Lowairde.websitescore 20· active website
brand in page title, not in the name “namecheap”
Lowduta07.websitescore 20· active website
brand in page title, not in the name “namecheap”
Lower78.websitescore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowfordeleecorp.websitescore 20· active website
brand in page title, not in the name “namecheap”
Lowhiltonbetgiris.websitescore 20· active website
brand in page title, not in the name “telegram”
Lowreelqueue.websitescore 20· active website
brand in page title, not in the name “tiktok”
Lowskprojectv.websitescore 20· active website
brand in page title, not in the name “namecheap”
Lowwhwh.websitescore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowwjheh.websitescore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowwwhww.websitescore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowyuntu.websitescore 20· active website
brand in page title, not in the name “chatgpt”
Lowxn--80aajim7a9a.websitescore 18· no DNS
punycode name “аиагент scripts=CYRILLIC”
Lowxn--psszgsp09bg3gdr9f.websitescore 18· redirects elsewhere
punycode name “广西奶娃大学 scripts=CJK”
Lowxn--sjqv0spzbz7c.websitescore 18· redirects elsewhere
punycode name “四九大学 scripts=CJK”
Lowdmservices.websitescore 12· active website
lure words (login, verify, secure…) “service,services”
Lowjoker-play-and-win.websitescore 12· empty page
lure words (login, verify, secure…) “win”many hyphens “3”
Lowonline-recovery.websitescore 12· no DNS
lure words (login, verify, secure…) “recover,recovery”

Same data as JSON: /api/zone/risk?day=2026-10-13&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.