Flagged newborn domains, Monday, October 19, 2026

20 names at tier medium or above in .lol, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalrobloxexploits.lolscore 71echoes roblox· active website
brand in the name “roblox”TLD with a high abuse rate “lol”brand name and brand-styled page “roblox”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highshanshuicloud.lolscore 55echoes icloud· not probed yet
brand in the name “icloud”TLD with a high abuse rate “lol”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Hightelegramhao.lolscore 53echoes telegram· active website
brand in the name “telegram”TLD with a high abuse rate “lol”brand name and brand-styled page “telegram”

Model opinion: looks like abuse (target: Telegram), confidence 80%. An opinion, not a finding.

Hightelegramzhanghao.lolscore 53echoes telegram· active website
brand in the name “telegram”TLD with a high abuse rate “lol”brand name and brand-styled page “telegram”

Model opinion: looks like abuse (target: Telegram), confidence 80%. An opinion, not a finding.

Highizmirescortbayan.lolscore 46· active website
TLD with a high abuse rate “lol”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 76%. An opinion, not a finding.

Mediumxn--3kqzju8dy9lcxh00bx44c86f6a6338d.lolscore 35· empty page
punycode name “全球灵异事件处理总部 scripts=CJK”very long name “35”random-looking name “H=4.23”TLD with a high abuse rate “lol”
Mediumhenhouse.lolscore 30· active website
TLD with a high abuse rate “lol”page impersonates a brand “Binance”
Mediumkeyboardcatsol.lolscore 30· active website
TLD with a high abuse rate “lol”page impersonates a brand “coinbase”
Mediumokz2.lolscore 30· active website
TLD with a high abuse rate “lol”page impersonates a brand “Netflix”
Medium0x9.lolscore 28· active website
TLD with a high abuse rate “lol”brand in page title, not in the name “google”
Mediumbookrunner.lolscore 28· active website
TLD with a high abuse rate “lol”brand in page title, not in the name “robinhood”
Mediumclikpxl.lolscore 28· active website
TLD with a high abuse rate “lol”brand in page title, not in the name “facebook”
Mediumcordpad.lolscore 28· server error
TLD with a high abuse rate “lol”brand in page title, not in the name “cloudflare”
Mediumgodspeedrobin.lolscore 28· active website
TLD with a high abuse rate “lol”brand in page title, not in the name “robinhood”
Mediumliga788sport.lolscore 28· blocked the probe
TLD with a high abuse rate “lol”brand in page title, not in the name “cloudflare”
Mediumrobelinpad.lolscore 28· active website
TLD with a high abuse rate “lol”brand in page title, not in the name “robinhood”
Mediumteleforge.lolscore 28· active website
TLD with a high abuse rate “lol”brand in page title, not in the name “telegram”
Mediumuuutest.lolscore 28· active website
TLD with a high abuse rate “lol”brand in page title, not in the name “amazon”
Mediumwwwpad.lolscore 28· server error
TLD with a high abuse rate “lol”brand in page title, not in the name “cloudflare”
Mediumxeet.lolscore 28· active website
TLD with a high abuse rate “lol”brand in page title, not in the name “robinhood”

Same data as JSON: /api/zone/risk?day=2026-10-19&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.