Flagged newborn domains, Friday, October 16, 2026

13 names at tier medium or above in .vip, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalstreamgate.vipscore 60· active website
page impersonates a brand “Netflix”brand in page title, not in the name “apple”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.

Highquadrantxshopify.vipscore 56echoes shopify· active website
brand in the name “shopify”brand name at a retail registrar “GoDaddy.com, LLC”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highmercadolibremall.vipscore 55echoes mercadolibre· empty page
brand in the name “mercadolibre”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”brand name and brand-styled page “mercadolibre”

Model opinion: looks like phishing (target: Mercado Libre), confidence 86%. An opinion, not a finding.

Hightkfollower.vipscore 46· active website
free DNS provider “dnsowl.com”brand in page title, not in the name “instagram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highsexbox.vipscore 44echoes xbox· active website
brand in the name “xbox”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Hightiktokline.vipscore 44echoes tiktok· no DNS
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “DNSPod, Inc.”
Hightaobo.vipscore 42echoes taobao· no DNS
one-letter brand typo “taobo≈taobao”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Mediumforsylwork.vipscore 38· active website
brand in page title, not in the name “shopify”form on a brand-styled page “has_form”
Mediumlizipai.vipscore 38· active website
brand in page title, not in the name “amazon”form on a brand-styled page “has_form”
Mediumyunhaiai.vipscore 38· active website
brand in page title, not in the name “chatgpt”form on a brand-styled page “has_form”
Mediumofficialcasino.vipscore 28· active website
lure words (login, verify, secure…) “official”page impersonates a brand “PayPal”
Mediumwhaiokapp.vipscore 28· redirects elsewhere
free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
punycode name “苏州高新区浒关分区广利来电子厂 scripts=CJK”very long name “50”random-looking name “H=4.45”

Same data as JSON: /api/zone/risk?day=2026-10-16&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.