Flagged newborn domains, Friday, October 16, 2026

15 names at tier medium or above in .dev, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highshopify-verify-security.devscore 55echoes shopify· not probed yet
brand in the name “shopify”lure words (login, verify, secure…) “security,verify”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”+1 more
Highrevolutionaryrobotics.devscore 54echoes revolut· boilerplate page
brand in the name “revolut”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “1147 identical pages”

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Highomarchy-mobile.devscore 52echoes tmobile· registrar placeholder
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Namecheap Inc.”brand name at a watch-list registrar “Namecheap Inc.”identical page on many newborns “4257 identical pages”
Highdaton.devscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Mediumastralintel.devscore 38· active website
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumburnproof.devscore 38· active website
brand in page title, not in the name “openai”form on a brand-styled page “has_form”
Mediumdjaminn.devscore 38· redirects elsewhere
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Mediumfixmyvibe.devscore 38· active website
brand in page title, not in the name “stripe”form on a brand-styled page “has_form”
Mediuminstalls.devscore 38· active website
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Mediummoraeswebdesign.devscore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
Mediumonlyhens.devscore 38· active website
brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”
Mediumrishumstage.devscore 38· redirects elsewhere
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Mediumtomasferreira.devscore 38· active website
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumupskillai.devscore 38· active website
brand in page title, not in the name “chatgpt”form on a brand-styled page “has_form”
Mediumgoogle-analytics.devscore 36echoes google· not probed yet
brand in the name “google”brand name behind Cloudflare “cloudflare.com”

Same data as JSON: /api/zone/risk?day=2026-10-16&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.