Flagged newborn domains, Sunday, October 25, 2026

1,702 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highxxunguo.worldscore 42· active website
page impersonates a brand “Apple ID”brand in page title, not in the name “apple”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highyeyeyun.appscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 64%. An opinion, not a finding.

Highyifanyun.appscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 54%. An opinion, not a finding.

Highykkcloud.appscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “chatgpt”

Model opinion: looks benign, confidence 53%. An opinion, not a finding.

Highhulufashion.shopscore 40echoes hulu· boilerplate page
brand in the name “hulu”identical page on many newborns “25 identical pages”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highnet-syn.ninjascore 40echoes etsy· active website
brand in the name “etsy”brand name at a retail registrar “Global Domain Group LLC”form on a brand-styled page “has_form”

Model opinion: looks benign (target: etsy), confidence 66%. An opinion, not a finding.

Mediumactionnow-apple.comscore 39echoes apple· server error
ambiguous brand word “apple”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more

Model opinion: suspicious (target: apple), confidence 40%. An opinion, not a finding.

Medium1d-collab.landscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Collab.Land), confidence 80%. An opinion, not a finding.

Medium1stcontactdemo.comscore 38· active website
brand in page title, not in the name “booking”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Medium7kb3x.comscore 38· active website
brand in page title, not in the name “ledger”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Ledger), confidence 88%. An opinion, not a finding.

Mediumabnamrogroup.comscore 38echoes abnamro
brand in the name “abnamro”brand name at a retail registrar “Gransy, s.r.o.”
Mediumabogado-santander.comscore 38echoes santander
brand in the name “santander”brand name at a retail registrar “IONOS SE”
Mediumaditya.sbsscore 38· registrar placeholder
TLD with a high abuse rate “sbs”brand in page title, not in the name “hostinger”identical page on many newborns “61 identical pages”

Model opinion: looks benign, confidence 94%. An opinion, not a finding.

Mediumadroute.spacescore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Mediumadvocaciabitencourt.comscore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 64%. An opinion, not a finding.

Mediumaeronex.onlinescore 38· active website
brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Mediumafslookup.comscore 38· redirects elsewhere
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 59%. An opinion, not a finding.

Mediumafyanuru.comscore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Mediumagendadordeposts.techscore 38· active website
brand in page title, not in the name “instagram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Mediumaida-translate.appscore 38· redirects elsewhere
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 45%. An opinion, not a finding.

Mediumairbag.onescore 38· active website
brand in page title, not in the name “ebay”form on a brand-styled page “has_form”

Model opinion: suspicious (target: eBay), confidence 60%. An opinion, not a finding.

Mediumaireadyprompt.sitescore 38· active website
brand in page title, not in the name “chatgpt”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Mediumaitaobao.sitescore 38echoes taobao· no DNS
brand in the name “taobao”brand name at a retail registrar “DNSPod, Inc.”
Mediumaiworkbook.blogscore 38· active website
brand in page title, not in the name “chatgpt”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Mediumalarah.appscore 38· active website
brand in page title, not in the name “instagram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 58%. An opinion, not a finding.

Mediumalimalamandsiangfood.onlinescore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 84%. An opinion, not a finding.

Mediumalipaynum.comscore 38echoes alipay
brand in the name “alipay”brand name at a retail registrar “Realtime Register B.V.”
Mediumalipayox.comscore 38echoes alipay
brand in the name “alipay”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Mediumallvid.orgscore 38· active website
brand in page title, not in the name “facebook”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 46%. An opinion, not a finding.

Mediumalphadesigns.agencyscore 38· active website
brand in page title, not in the name “shopify”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Mediumaltrisense.onlinescore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 65%. An opinion, not a finding.

Mediumamantechnicalsolutions.websitescore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 83%. An opinion, not a finding.

Mediumamazon-mnl.onlinescore 38echoes amazon· excluded
brand in the name “amazon”brand name at a retail registrar “GoDaddy.com, LLC”

Model opinion: looks like abuse (target: Amazon), confidence 77%. An opinion, not a finding.

Mediumamazonthedog.comscore 38echoes amazon
brand in the name “amazon”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumamlify.onlinescore 38· redirects elsewhere
brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 74%. An opinion, not a finding.

Mediumamrox.techscore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 78%. An opinion, not a finding.

Mediumandromedainsightsgear.shopscore 38· active website
brand in page title, not in the name “nvidia”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Mediumang3l.inkscore 38· active website
brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 51%. An opinion, not a finding.

Mediumantlerapparel.shopscore 38· active website
brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Antler), confidence 85%. An opinion, not a finding.

Mediumapicore-whatsapp.comscore 38echoes whatsapp
brand in the name “whatsapp”brand name at a retail registrar “GKG.Net, Inc.”
Mediumappasync-whatsapp.comscore 38echoes whatsapp
brand in the name “whatsapp”brand name at a retail registrar “GKG.Net, Inc.”
Mediumappcore-whatsapp.comscore 38echoes whatsapp
brand in the name “whatsapp”brand name at a retail registrar “GKG.Net, Inc.”
Mediumappfr.infoscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Mediumappkit-whatsapp.comscore 38echoes whatsapp
brand in the name “whatsapp”brand name at a retail registrar “GKG.Net, Inc.”
Mediumappmeta-whatsapp.comscore 38echoes whatsapp
brand in the name “whatsapp”brand name at a retail registrar “GKG.Net, Inc.”
Mediumappmode-whatsapp.comscore 38echoes whatsapp
brand in the name “whatsapp”brand name at a retail registrar “GKG.Net, Inc.”
Mediumappprod-whatsapp.comscore 38echoes whatsapp
brand in the name “whatsapp”brand name at a retail registrar “GKG.Net, Inc.”
Mediumapppush-whatsapp.comscore 38echoes whatsapp
brand in the name “whatsapp”brand name at a retail registrar “GKG.Net, Inc.”
Mediumappread-whatsapp.comscore 38echoes whatsapp
brand in the name “whatsapp”brand name at a retail registrar “GKG.Net, Inc.”
Mediumapprepo-whatsapp.comscore 38echoes whatsapp
brand in the name “whatsapp”brand name at a retail registrar “GKG.Net, Inc.”

Same data as JSON: /api/zone/risk?day=2026-10-25&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.