Flagged newborn domains, Saturday, October 17, 2026
44 names at tier medium or above in .store, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
page impersonates a brand “NetFlix”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
brand in the name “shopify”brand name at a retail registrar “Namify Domains Inc”brand in page title, not in the name “cloudflare”
Model opinion: looks like abuse (target: Shopify), confidence 55%. An opinion, not a finding.
brand spelled with digits “hu-plairev0lut→revolut”brand plus digits “hu-plairev0lut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
brand in the name “ionos”lure words (login, verify, secure…) “account,verify”form on a brand-styled page “has_form”identical page on many newborns “1452 identical pages”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
one-letter brand typo “finance≈binance”lure words (login, verify, secure…) “secure”
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
page impersonates a brand “Netflix”brand in page title, not in the name “whatsapp”
Model opinion: looks benign, confidence 62%. An opinion, not a finding.
one-letter brand typo “staylink≈starlink”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
brand in the name “bestbuy”brand name at a retail registrar “IONOS SE”
brand in the name “amazon”brand name at a retail registrar “Network Solutions, LLC”
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
brand in page title, not in the name “bbva”form on a brand-styled page “has_form”
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
brand in page title, not in the name “telegram”form on a brand-styled page “has_form”
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in page title, not in the name “nintendo”form on a brand-styled page “has_form”
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
page asks for credentials “Login to your account”form submits over plain HTTP “http://www.cnxalu.store/backend/login”
one-letter brand typo “shopen≈shopee”brand name at a retail registrar “GoDaddy.com, LLC”
many hyphens “4”very long name “39”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “40”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “44”brand in page title, not in the name “cloudflare”
many hyphens “6”very long name “48”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “37”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “40”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “38”brand in page title, not in the name “cloudflare”
brand in page title, not in the name “hostinger”identical page on many newborns “61 identical pages”
brand in page title, not in the name “hostinger”identical page on many newborns “61 identical pages”
brand in the name “roblox”
brand in page title, not in the name “hostinger”identical page on many newborns “61 identical pages”
punycode name “대전성남우미린홈페이지 scripts=HANGUL”very long name “39”random-looking name “H=4.25”
punycode name “대전하늘채홈페이지 scripts=HANGUL”very long name “32”random-looking name “H=4.28”
lure words (login, verify, secure…) “official”brand in page title, not in the name “cloudflare”
many hyphens “3”brand in page title, not in the name “cloudflare”
Same data as JSON: /api/zone/risk?day=2026-10-17&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.