Flagged newborn domains, Saturday, October 17, 2026

39 names at tier low or above in .vip, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

High38ay8w.vipscore 55echoes ebay· blocked the probe
brand spelled with digits “38ay8w→ebay”brand plus digits “38ay8w”brand name at a retail registrar “GoDaddy.com, LLC”brand name redirects elsewhere “aoopfd.vip”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highmercadolibreshop.vipscore 55echoes mercadolibre· empty page
brand in the name “mercadolibre”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”brand name and brand-styled page “mercadolibre”

Model opinion: looks like abuse (target: Mercado Libre), confidence 80%. An opinion, not a finding.

Highbeibeicloud.vipscore 50echoes icloud· not probed yet
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com LLC”brand name at a watch-list registrar “Sav.com LLC”
Highbbyvpn.vipscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highchuyun.vipscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “tiktok”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Mediumxyb3rm4n.vipscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Lowxn--kprv4es8gjtboz8lq9k.vipscore 23· boilerplate page
punycode name “鼎峰国际平台 scripts=CJK”random-looking name “H=4.20”
Lowxn--kprv4ez9i1t1agr8alyl.vipscore 23· boilerplate page
punycode name “真龙国际平台 scripts=CJK”random-looking name “H=4.10”
Lowxn--psszg58c206a.vipscore 23· empty page
punycode name “奶油大学 scripts=CJK”random-looking name “H=3.66”
Lowxn--vcs00i8x3a3phn13alyl.vipscore 23· not probed yet
punycode name “真龙国际官网 scripts=CJK”random-looking name “H=3.79”
Lowxn--vcs00ijwk76rgt9alyl.vipscore 23· not probed yet
punycode name “真龙国际官方 scripts=CJK”random-looking name “H=4.20”
Lowxn--vcs00ip3a575fn8xq9k.vipscore 23· not probed yet
punycode name “鼎峰国际官网 scripts=CJK”random-looking name “H=4.01”
Lowxn--vcs00ip3ad3tn94dq9k.vipscore 23· not probed yet
punycode name “鼎峰国际官方 scripts=CJK”random-looking name “H=3.92”
Lowbnsagent.vipscore 22· active website
page impersonates a brand “Binance”
Lowcasinoudenrofus2.vipscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowformulir.vipscore 20· active website
brand in page title, not in the name “google”
Lowftrcat.vipscore 20· active website
brand in page title, not in the name “tesla”
Lowhalloweninvite.vipscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowimarogi.vipscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowm68bet.vipscore 20· active website
brand in page title, not in the name “telegram”
Lowmechafolio.vipscore 20· active website
brand in page title, not in the name “robinhood”
Lowoldyak.vipscore 20· active website
brand in page title, not in the name “tiktok”
Lowportugalmail.vipscore 20· empty page
brand in page title, not in the name “cloudflare”
Lowsmidge.vipscore 20· active website
brand in page title, not in the name “wordpress”
Lowstore-max.vipscore 20· active website
brand in page title, not in the name “tiktok”
Lowwoaicodex.vipscore 20· active website
brand in page title, not in the name “chatgpt”
Lowxn--5su96hb04d.vipscore 18· empty page
punycode name “齐杰拉 scripts=CJK”
Lowxn--6dbdbbtac0cj9em.vipscore 18· excluded
punycode name “רישיוןנהיגה scripts=HEBREW”
Lowxn--amigvelpg-31a.vipscore 18· active website
punycode name “amigávelpg scripts=LATIN”
Lowxn--app-qj1fh230a.vipscore 18· boilerplate page
punycode name “鼎峰app scripts=CJK/LATIN”
Lowxn--elts91dhjne8t.vipscore 18· boilerplate page
punycode name “鼎峰相见 scripts=CJK”
Lowxn--jbyu0o.vipscore 18· active website
punycode name “玄策 scripts=CJK”
Lowxn--qvra844u.vipscore 18· no DNS
punycode name “哈哈猪 scripts=CJK”
Lowxn--rhqx00c95nv9a.vipscore 18· active website
punycode name “我的世界 scripts=CJK”
Lowxn--sssz3o.vipscore 18· no DNS
punycode name “恺太 scripts=CJK”
Lowxn--wbso4ds1bc1dc81imtl.vipscore 18· empty page
punycode name “四川奶龙学院 scripts=CJK”
Lowxn--yusy8by07arsesy4cmtl.vipscore 18· no DNS
punycode name “玉溪奶龙学院 scripts=CJK”
Lowjchizzyrewards.vipscore 12· active website
lure words (login, verify, secure…) “reward,rewards”
Lowmrwinnerofficial.vipscore 12· registrar placeholder
lure words (login, verify, secure…) “official,winner”

Same data as JSON: /api/zone/risk?day=2026-10-17&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.