Flagged newborn domains, Thursday, October 15, 2026

11 names at tier high or above in .live, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalamazontrack-uk.livescore 89echoes amazon· active website
brand in the name “amazon”lure words (login, verify, secure…) “track”brand name and brand-styled page “amazon”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Criticalgusti-leder.livescore 74echoes ledger· active website
one-letter brand typo “leder≈ledger”brand name behind Cloudflare “cloudflare.com”page impersonates a brand “DHL”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Gusti Leder), confidence 80%. An opinion, not a finding.

Criticalcloud-raven.livescore 66echoes icloud· active website
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highintesatradeai.livescore 50echoes intesa· not probed yet
brand in the name “intesa”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highsavanna-gazelle.livescore 50echoes zelle· not probed yet
brand in the name “zelle”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highlcloud-flnd.livescore 48echoes icloud· boilerplate page
one-letter brand typo “lcloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”

Model opinion: looks like phishing (target: Apple iCloud), confidence 75%. An opinion, not a finding.

Highbestbuytestdomain01.livescore 46echoes bestbuy· active website
brand in the name “bestbuy”brand plus digits “bestbuytestdomain01”brand name at a retail registrar “Name.com, Inc.”

Model opinion: looks like abuse (target: Best Buy), confidence 55%. An opinion, not a finding.

Highadobesystems.livescore 44echoes adobe· no DNS
brand in the name “adobe”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highvanguardfurniture.livescore 44echoes vanguard· not probed yet
brand in the name “vanguard”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
High1d7x4q9n2w8k0f6mzb.livescore 43· blocked the probe
random-looking name “H=4.17”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
High5y1c9w6f2j8h0t4bgd.livescore 43· blocked the probe
random-looking name “H=4.17”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Same data as JSON: /api/zone/risk?day=2026-10-15&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.