Flagged newborn domains, Friday, October 16, 2026

49 names at tier medium or above in .site, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalogboost.sitescore 68· active website
page asks for credentials “log in to your account”brand in page title, not in the name “facebook”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Criticalmuthoot-finance.sitescore 62echoes binance· active website
one-letter brand typo “finance≈binance”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand in page title, not in the name “wordpress”

Model opinion: looks like abuse (target: Muthoot Finance), confidence 80%. An opinion, not a finding.

Highkraken6.sitescore 56echoes kraken· active website
one-letter brand typo “kraken6≈kraken”brand plus digits “kraken6”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Highbestbuyratings.sitescore 55echoes bestbuy· suspended
brand in the name “bestbuy”form on a brand-styled page “has_form”brand name redirects elsewhere “expireddomains.com”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highkraken5.sitescore 55echoes kraken· not probed yet
one-letter brand typo “kraken5≈kraken”brand plus digits “kraken5”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Hightrustwalletinvest.sitescore 55echoes trustwallet· not probed yet
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”
Highrevalut-quest.sitescore 54echoes revolut· empty page
one-letter brand typo “revalut≈revolut”form on a brand-styled page “has_form”brand name redirects elsewhere “google.com”

Model opinion: looks like abuse (target: Revolut), confidence 60%. An opinion, not a finding.

Highchatgptmillionaire.sitescore 51echoes chatgpt· active website
brand in the name “chatgpt”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “chatgpt”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highbigkakao.sitescore 50echoes kakao· empty page
brand in the name “kakao”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highvalricochimneyservices.sitescore 50· active website
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “chase”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highmyfacebook.sitescore 48echoes facebook· boilerplate page
brand in the name “facebook”brand name at a retail registrar “Synergy Wholesale Accreditations Pty Ltd”identical page on many newborns “279 identical pages”

Model opinion: looks like abuse (target: Facebook), confidence 70%. An opinion, not a finding.

Highasian4d-mobile.sitescore 44echoes tmobile· no web server
one-letter brand typo “mobile≈tmobile”brand plus digits “asian4d-mobile”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Highsettings-telegram.sitescore 44echoes telegram· robots.txt denied
brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
Hightelegram-advanced.sitescore 44echoes telegram· robots.txt denied
brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
Highxyberveilproxy.sitescore 44· active website
page asks for credentials “Sign in to your account”login form “has_form+login words”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highstarline-express.sitescore 42echoes starling· empty page
one-letter brand typo “starline≈starling”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: suspicious (target: Starline Express), confidence 72%. An opinion, not a finding.

Mediumaxelagent.sitescore 38· active website
brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”
Mediumbrblack99.sitescore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumbrlive.sitescore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumclubedescontos.sitescore 38· active website
brand in page title, not in the name “amazon”form on a brand-styled page “has_form”
Mediumcubicgrowth.sitescore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumdashe.sitescore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Mediumineedsave.sitescore 38· active website
brand in page title, not in the name “facebook”form on a brand-styled page “has_form”
Mediumliveo.sitescore 38· active website
brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”
Mediumloveearth.sitescore 38· active website
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediummediasave.sitescore 38· active website
brand in page title, not in the name “facebook”form on a brand-styled page “has_form”
Mediumonyxbot.sitescore 38· active website
brand in page title, not in the name “telegram”form on a brand-styled page “has_form”
Mediumpopechimneyrepair.sitescore 38· active website
brand in page title, not in the name “apple”form on a brand-styled page “has_form”
Mediumrakutenweekly.sitescore 38echoes rakuten· no web server
brand in the name “rakuten”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Mediumt-quickbooks.sitescore 38echoes quickbooks· boilerplate page
brand in the name “quickbooks”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
Mediumtalimpomanaus.sitescore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
Mediumtestshopco-1015b.sitescore 38· active website
brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”
Mediumvarantmobile.sitescore 38echoes tmobile· no web server
brand in the name “tmobile”brand name at a retail registrar “Turkticaret.net Yazılım Hizmetleri Sanay”
Mediumamaxon.sitescore 36echoes amazon· other
one-letter brand typo “amaxon≈amazon”brand name at a retail registrar “Name.com, Inc.”
Mediumlooking.sitescore 36echoes booking· not probed yet
one-letter brand typo “looking≈booking”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumatendimentovirtual.sitescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “64 identical pages”
Mediumclassictel.sitescore 30· active website
page asks for credentials “verify your account”
Mediumfamilylawyers.sitescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “64 identical pages”
Mediuminstitutoneurocalm.sitescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “64 identical pages”
Mediumjovianetworking.sitescore 30· active website
page asks for credentials “Login to account”
Mediumneewpet.sitescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “64 identical pages”
Mediumphonestore.sitescore 30· active website
page asks for credentials “Sign in to your account”
Mediumsehia.sitescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “64 identical pages”
Mediumsupplementsguidereview.sitescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “64 identical pages”
Mediumsupplementsreviewhub.sitescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “64 identical pages”
Mediumtenautoexhange.sitescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “64 identical pages”
Mediumthe-best-offers.sitescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “64 identical pages”
Mediumxn--x50bj6b8j63k71rchdc0cq82b2ke.sitescore 27· active website
punycode name “쌍용더플래티넘돈암 scripts=HANGUL”very long name “32”random-looking name “H=4.12”
Mediuminfinitemesupport.sitescore 26· active website
lure words (login, verify, secure…) “support”brand in page title, not in the name “namecheap”

Same data as JSON: /api/zone/risk?day=2026-10-16&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.