Flagged newborn domains, Saturday, October 17, 2026

30 names at tier low or above in .wiki, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalzombieairforceroblox.wikiscore 65echoes roblox· active website
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Criticaldisneypixartoystory3completeedition.wikiscore 63echoes disney· active website
brand in the name “disney”very long name “35”brand plus digits “disneypixartoystory3completeedition”brand name behind Cloudflare “cloudflare.com”+1 more

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Higheclipseanimatorroblox.wikiscore 53echoes roblox· active website
brand in the name “roblox”brand name at a retail registrar “Name.com, Inc.”brand name and brand-styled page “roblox”

Model opinion: looks benign, confidence 81%. An opinion, not a finding.

Highcyberpunkedgerunners2game.wikiscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Mediumchainedbeasts-steam.wikiscore 39echoes steam· active website
ambiguous brand word “steam”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more
Mediumattack-on-titan-paradis.wikiscore 26· active website
many hyphens “3”brand in page title, not in the name “roblox”
Lowfulfillment.wikiscore 22· active website
page impersonates a brand “USPS”
Lowarmycommanderguide.wikiscore 20· active website
brand in page title, not in the name “roblox”
Lowbeyondthesestarswiki.wikiscore 20· active website
brand in page title, not in the name “steam”
Lowbonanza88slot.wikiscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowchainedbeastsguides.wikiscore 20· active website
brand in page title, not in the name “steam”
Lowchainedbeastshub.wikiscore 20· active website
brand in page title, not in the name “steam”
Lowevilbanegame.wikiscore 20· active website
brand in page title, not in the name “steam”
Lowflippingishard.wikiscore 20· active website
brand in page title, not in the name “steam”
Lowgolive.wikiscore 20· server error
brand in page title, not in the name “cloudflare”
Lowharpoonafish.wikiscore 20· active website
brand in page title, not in the name “roblox”
Lowharpoonafishguide.wikiscore 20· active website
brand in page title, not in the name “roblox”
Lownukeacountry.wikiscore 20· active website
brand in page title, not in the name “roblox”
Lowrunyourownfarmstead.wikiscore 20· active website
brand in page title, not in the name “roblox”
Lowtalesofeternia.wikiscore 20· active website
brand in page title, not in the name “playstation”
Lowthemurmur.wikiscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowtrollheimgnomes.wikiscore 20· active website
brand in page title, not in the name “steam”
Lowvoodoofishinguide.wikiscore 20· active website
brand in page title, not in the name “steam”
Lowwashthecar.wikiscore 20· active website
brand in page title, not in the name “roblox”
Lowxn--fiqspo52asw7b.wikiscore 18· no DNS
punycode name “蛋仔中学 scripts=CJK”
Lowxn--mnqp9mywk.wikiscore 18· no web server
punycode name “代商惊 scripts=CJK”
Lowaiworkspace.wikiscore 14· active website
login form “has_form+login words”
Lowtempmail.wikiscore 14· active website
login form “has_form+login words”
Lowwallet-pi.wikiscore 14· no web server
lure words (login, verify, secure…) “wallet”free DNS provider “dnsowl.com”
Lowloginconnectionsonlineonlineonlineonline.wikiscore 10· boilerplate page
lure words (login, verify, secure…) “login”very long name “40”

Same data as JSON: /api/zone/risk?day=2026-10-17&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.