Flagged newborn domains, Friday, October 16, 2026

175 names at tier low or above in .click, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalssstwitter.clickscore 71echoes twitter· active website
brand in the name “twitter”TLD with a high abuse rate “click”brand name and brand-styled page “twitter”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Twitter), confidence 62%. An opinion, not a finding.

Criticalxn--ehqx7tcnnope.clickscore 68· active website
punycode name “三毛机场 scripts=CJK”TLD with a high abuse rate “click”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 66%. An opinion, not a finding.

Highsmartaiintuit.clickscore 58echoes intuit· active website
brand in the name “intuit”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highconfirm-booking.clickscore 55echoes booking· no DNS
brand in the name “booking”lure words (login, verify, secure…) “confirm”TLD with a high abuse rate “click”
Highamazoncdn1102.clickscore 52echoes amazon· no DNS
brand in the name “amazon”brand plus digits “amazoncdn1102”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”
Highsuyunticloud.clickscore 52echoes icloud· active website
brand in the name “icloud”TLD with a high abuse rate “click”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Hightrinhquochung.clickscore 52· active website
TLD with a high abuse rate “click”brand in page title, not in the name “zoom”form on a brand-styled page “has_form”form submits over plain HTTP “https://www.trinhquochung.click/”

Model opinion: looks like a scam, confidence 62%. An opinion, not a finding.

Highfinance-mqjh.clickscore 50echoes binance· boilerplate page
one-letter brand typo “finance≈binance”TLD with a high abuse rate “click”brand name at a retail registrar “NAMECHEAP”brand name at a watch-list registrar “NAMECHEAP”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highnorvexis-silvermeadow.clickscore 50· active website
TLD with a high abuse rate “click”page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.

High2tahiti.clickscore 46· active website
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 96%. An opinion, not a finding.

Highbasketmusicline.clickscore 46· active website
TLD with a high abuse rate “click”brand in page title, not in the name “medicare”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highdroidreviewdresskoiplcds.clickscore 46· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highmaincraccs.clickscore 46· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highsavetik.clickscore 46· active website
TLD with a high abuse rate “click”brand in page title, not in the name “facebook”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Hightavionex-frostglen.clickscore 46· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Hightelegrambot.clickscore 46echoes telegram· no web server
brand in the name “telegram”TLD with a high abuse rate “click”brand name at a retail registrar “Web Commerce Communications Ltd.”
Hightiktok-site.clickscore 46echoes tiktok· blocked the probe
brand in the name “tiktok”TLD with a high abuse rate “click”brand name at a retail registrar “GMO Internet, Inc. d/b/a Onamae.com”
Mediumteambull.clickscore 38· active website
TLD with a high abuse rate “click”page asks for credentials “verify your account”
Mediumcutecloud.clickscore 30· active website
TLD with a high abuse rate “click”page impersonates a brand “Netflix”
Mediumhidden-romania-monuments.clickscore 30· active website
TLD with a high abuse rate “click”page impersonates a brand “Netflix”
Medium2221-325-2389.clickscore 28· empty page
TLD with a high abuse rate “click”brand in page title, not in the name “shopee”
Mediumarlavor-crystalbrook.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumcelebratoryinvite.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumchatcomempresas.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumdmiasphalt.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumgastrobarpc.clickscore 28· redirects elsewhere
TLD with a high abuse rate “click”brand in page title, not in the name “whatsapp”
Mediumgavexan-amberfield.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumhbpos.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “whatsapp”
Mediumjenvexa-thundercrest.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumkorvionis-mistgrove.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumlalamp.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediummediterranczsro.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “google”
Mediummenuzap.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “whatsapp”
Mediumnexmoney.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “google”
Mediumprufungrichline.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumspecialday.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumstavebninydekas.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “google”
Mediumswipepad.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “apple”
Mediumsylveron-mistspire.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumtelli.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumtopstonesro.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “google”
Mediumttubz.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumwienerbergersro.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “google”
Mediumxalnexis-moonvalley.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumzapabetonas.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “google”
Mediumzavoren-moonvalley.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumzorvatic.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumxn--9kq542pkkd.clickscore 26· active website
punycode name “飞鸟云 scripts=CJK”TLD with a high abuse rate “click”
Mediumxn--9kq980dnru.clickscore 26· not probed yet
punycode name “最萌云 scripts=CJK”TLD with a high abuse rate “click”
Lowbntv.clickscore 22· active website
TLD with a high abuse rate “click”login form “has_form+login words”

Same data as JSON: /api/zone/risk?day=2026-10-16&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.