Flagged newborn domains, Thursday, October 15, 2026

26 names at tier low or above in .lat, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalgaboapp.latscore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highbagus44.latscore 55echoes usaa· no DNS
brand spelled with digits “bagus44→usaa”brand plus digits “bagus44”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more

Model opinion: suspicious (target: USAA), confidence 60%. An opinion, not a finding.

Highdocusgn.latscore 54echoes docusign· blocked the probe
one-letter brand typo “docusgn≈docusign”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “cloudflare”
Hightelegram88.latscore 52echoes telegram· no DNS
brand in the name “telegram”brand plus digits “telegram88”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highsoporte-icloud.latscore 50echoes icloud· boilerplate page
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: suspicious (target: Apple iCloud), confidence 72%. An opinion, not a finding.

Highwinxbox.latscore 50echoes xbox· no DNS
brand in the name “xbox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highneoflix.latscore 48echoes netflix· not probed yet
one-letter brand typo “neoflix≈netflix”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Hightiktokbet.latscore 44echoes tiktok· no DNS
brand in the name “tiktok”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Mediumbloombyte1.latscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumestou-live-agora-online.latscore 26· other
many hyphens “3”brand in page title, not in the name “cloudflare”
Lowlocalmarket.latscore 22· active website
page impersonates a brand “PayPal”
Lowanimetv.latscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowasesoriasmunoz.latscore 20· active website
brand in page title, not in the name “whatsapp”
Lowbeautymina.latscore 20· active website
brand in page title, not in the name “whatsapp”
Lowboku.latscore 20· active website
brand in page title, not in the name “whatsapp”
Lowchatapp.latscore 20· active website
brand in page title, not in the name “namecheap”
Lowcuadrosmiangel.latscore 20· active website
brand in page title, not in the name “whatsapp”
Lowdecmor.latscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowfelipehairdresser.latscore 20· active website
brand in page title, not in the name “whatsapp”
Lowpijamasmiangel.latscore 20· active website
brand in page title, not in the name “whatsapp”
Lowplayit.latscore 20· active website
brand in page title, not in the name “playstation”
Lowpremioexpreess.latscore 20· active website
brand in page title, not in the name “tiktok”
Lowrajaakurat-exp.latscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowbrassline.latscore 14· active website
login form “has_form+login words”
Lows9.latscore 14· active website
login form “has_form+login words”
Lowmap-apple.latscore 10echoes apple· robots.txt denied
ambiguous brand word “apple”brand name behind Cloudflare “cloudflare.com”

Same data as JSON: /api/zone/risk?day=2026-10-15&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.