Flagged newborn domains, Friday, November 6, 2026

12,218 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical87tiktok.topscore 79echoes tiktok· active website
brand in the name “tiktok”brand plus digits “87tiktok”TLD with a high abuse rate “top”brand name and brand-styled page “tiktok”+1 more

Model opinion: looks like abuse (target: TikTok), confidence 60%. An opinion, not a finding.

Criticalchatgptbrandtracker.comscore 74echoes chatgpt· active website
brand in the name “chatgpt”lure words (login, verify, secure…) “track”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Criticalplanetvanguard.orgscore 69echoes vanguard· active website
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “vanguard”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Criticalagdd.funscore 68· active website
TLD with a high abuse rate “fun”page impersonates a brand “Binance”brand in page title, not in the name “binance”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Criticallesartsmenagers.cfdscore 68· active website
TLD with a high abuse rate “cfd”page impersonates a brand “FedEx”brand in page title, not in the name “fedex”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: FedEx), confidence 88%. An opinion, not a finding.

Criticalshoutpad.funscore 68· active website
TLD with a high abuse rate “fun”page impersonates a brand “MetaMask”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Criticalsmmbinns.shopscore 68· active website
page asks for credentials “log in to your account”brand in page title, not in the name “facebook”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Criticalsmmpilot.shopscore 68· active website
page asks for credentials “log in to your account”brand in page title, not in the name “instagram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Criticalemerald-ledger-greece.topscore 65echoes ledger· active website
ambiguous brand word “ledger”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+3 more

Model opinion: looks like a scam, confidence 88%. An opinion, not a finding.

Criticaljtmobile.latscore 64echoes tmobile· active website
brand in the name “tmobile”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”brand in page title, not in the name “apple”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Criticalledger-one.techscore 64echoes ledger· active website
ambiguous brand word “ledger”page asks for credentials “Log in to your account”brand name and brand-styled page “ledger”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Criticalamazonlogistics.orgscore 63echoes amazon· active website
brand in the name “amazon”brand name and brand-styled page “amazon”form on a brand-styled page “has_form”

Model opinion: looks like a scam (target: Amazon), confidence 65%. An opinion, not a finding.

Criticalvanguardwebsolutions.websitescore 63echoes vanguard· active website
brand in the name “vanguard”brand name and brand-styled page “vanguard”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Criticalbhs-cloud-stacking.xyzscore 62echoes icloud· active website
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “wordpress”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Criticalseo-anomaly-electromagnetic-spectrum.cfdscore 62echoes spectrum· active website
ambiguous brand word “spectrum”many hyphens “3”very long name “36”TLD with a high abuse rate “cfd”+4 more

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Criticalvanguardglobalmarkets.livescore 62echoes vanguard· active website
brand in the name “vanguard”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Vanguard), confidence 60%. An opinion, not a finding.

Critical1stpitchbasebaytwuw.onlinescore 60echoes ebay· active website
brand in the name “ebay”brand plus digits “1stpitchbasebaytwuw”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+2 more

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Criticalacctrade.storescore 60· active website
page impersonates a brand “Apple ID”brand in page title, not in the name “apple”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 70%. An opinion, not a finding.

Criticaladinfo.infoscore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Criticalaetyk.xyzscore 60· active website
TLD with a high abuse rate “xyz”page pushes urgent payment “claim your prize”brand in page title, not in the name “apple”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Apple), confidence 72%. An opinion, not a finding.

Criticalallmoviehub.livescore 60· active website
page impersonates a brand “netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.

Criticalautominthub.appscore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticalcebacanada.orgscore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.

Criticalchinatownhal.orgscore 60· active website
page impersonates a brand “Netflix”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Criticalchwab-charlles.livescore 60echoes schwab· active website
one-letter brand typo “chwab≈schwab”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”form on a brand-styled page “has_form”

Model opinion: suspicious (target: schwab), confidence 40%. An opinion, not a finding.

Criticaldonorshands.orgscore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Criticalgoblox.funscore 60echoes roblox· active website
one-letter brand typo “goblox≈roblox”TLD with a high abuse rate “fun”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Criticalhavenoraliving.storescore 60· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Criticalinnowavesco.comscore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Criticaljinnymobi.comscore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 82%. An opinion, not a finding.

Criticaljollart.comscore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.

Criticalloanfinderfl.comscore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.

Criticalmirandaselitephotos.comscore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 82%. An opinion, not a finding.

Criticalmohatim.techscore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.

Criticalnetworkcompany.onlinescore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 82%. An opinion, not a finding.

Criticalnoteva.storescore 60· active website
page impersonates a brand “PayPal”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Criticalprimex-test.sitescore 60· active website
page impersonates a brand “PayPal”brand in page title, not in the name “facebook”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Criticalproject-echelon.orgscore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.

Criticalprotosem.techscore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Criticalqualitykingz.comscore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 86%. An opinion, not a finding.

Criticalrastreiosfedx.sitescore 60· active website
page impersonates a brand “Fedex”brand in page title, not in the name “fedex”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: FedEx), confidence 93%. An opinion, not a finding.

Criticalshipyesterday.orgscore 60· active website
page impersonates a brand “USPS”brand in page title, not in the name “fedex”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Criticalslot-hub-spot-id.topscore 60echoes hubspot· active website
brand in the name “hubspot”lure words (login, verify, secure…) “id”many hyphens “3”TLD with a high abuse rate “top”+1 more

Model opinion: looks like abuse, confidence 88%. An opinion, not a finding.

Criticalsmartbusinessoutsource.comscore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Criticaltageer.storescore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.

Criticaltaleasportcenter.comscore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Criticaltechpremium.onlinescore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Criticaltelesan.orgscore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.

Criticaltwizter.xyzscore 60echoes twitter· active website
one-letter brand typo “twizter≈twitter”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticalveedigitalglobal.comscore 60· active website
page impersonates a brand “Binance”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-11-06&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.