Flagged newborn domains, Friday, August 28, 2026

1,269 names at tier low or above in .top, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalinstagram18plus.topscore 80echoes instagram· active website
brand in the nameinstagrambrand plus digitsinstagram18plusTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com+2 more

Model opinion: looks like phishing (target: Google Play / Instagram (Meta)), confidence 80%. An opinion, not a finding.

Criticalcashcat-token.topscore 68· active website
TLD with a high abuse ratetoppage impersonates a brandBinancebrand in page title, not in the namebinanceform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 82%. An opinion, not a finding.

Criticalopenseva.topscore 68echoes opensea· active website
one-letter brand typoopenseva≈openseaTLD with a high abuse ratetopbrand name on a rarely-seen nameserversolidhosting.probrand name at a retail registrarOpenprovider+1 more

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Criticalteosbet-mobilerisimim.topscore 60echoes tmobile· active website
brand in the nametmobileTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot LLC+2 more

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Highamazoncojp.topscore 55echoes amazon· no DNS
brand in the nameamazonTLD with a high abuse ratetopfree DNS providerdnsowl.combrand name at a retail registrarNameSilo,LLC+1 more
Highe15mbc.topscore 55echoes smbc· no DNS
brand spelled with digitse15mbc→smbcbrand plus digitse15mbcTLD with a high abuse ratetopbrand name at a retail registrarDynadot LLC+1 more
Highizrabotkanatrezori.topscore 55echoes trezor· redirects elsewhere
brand in the nametrezorTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo,LLC+3 more

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highmicrosofts-online.topscore 55echoes microsoft· redirects elsewhere
brand in the namemicrosoftTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo,LLC+3 more

Model opinion: looks like abuse (target: Microsoft), confidence 78%. An opinion, not a finding.

Highsc88va.topscore 55echoes bbva· robots.txt denied
brand spelled with digitssc88va→bbvabrand plus digitssc88vaTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com+1 more
Hightelegraam.topscore 55echoes telegram· redirects elsewhere
one-letter brand typotelegraam≈telegramTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo,LLC+2 more

Model opinion: looks like abuse (target: Telegram), confidence 57%. An opinion, not a finding.

Highuserebay.topscore 55echoes ebay· no web server
brand in the nameebayTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo,LLC+1 more
High1stdibs.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks like abuse (target: 1stDibs), confidence 60%. An opinion, not a finding.

Highcasinobw.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highcasinofilm.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highdearqqzz.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highfilmpornobelli.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highgooglepro.topscore 46echoes google· no DNS
brand in the namegoogleTLD with a high abuse ratetopbrand name at a retail registrargadomains
Highinstcasino.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highitsx.topscore 46· blocked the probe
TLD with a high abuse ratetopbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highklmanga.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highmeritking-casino.topscore 46· blocked the probe
TLD with a high abuse ratetopbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highpornolabe.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highrpcasino.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highrtv24news.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the namewordpressform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highsushi-launch-pad.topscore 46· blocked the probe
TLD with a high abuse ratetopbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highweixinhao.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the namesteamform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 68%. An opinion, not a finding.

Highoriclouderse-ca.topscore 42echoes icloud· blocked the probe
brand in the nameicloudTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot LLC+1 more
Mediumforsaken-league.topscore 38· active website
TLD with a high abuse ratetoppage asks for credentialsVerify your account
Mediumw2bbva24.topscore 38echoes bbva· not probed yet
brand in the namebbvabrand plus digitsw2bbva24TLD with a high abuse ratetopbrand name at a retail registrarDominet (HK) Limited
Mediummsconfirm.topscore 36· active website
lure words (login, verify, secure…)confirmTLD with a high abuse ratetopfree DNS providerdnsowl.comlogin formhas_form+login words
Mediumpinupcasino-rpq.topscore 36· blocked the probe
TLD with a high abuse ratetopfree DNS providerdnsowl.combrand in page title, not in the namefacebook
punycode name北京市實驗外國語學校 scripts=CJKvery long name37random-looking nameH=4.25TLD with a high abuse ratetop
Mediumxn--1lq90iuzdmtcv4dsjx6lmrzou7emt4a.topscore 35· redirects elsewhere
punycode name北京市实验外国语学校 scripts=CJKvery long name35random-looking nameH=4.48TLD with a high abuse ratetop
punycode name酷羊网络科技工作室 scripts=CJKvery long name33random-looking nameH=4.28TLD with a high abuse ratetop
punycode name酷羊網絡科技工作室 scripts=CJKvery long name34random-looking nameH=4.33TLD with a high abuse ratetop
Mediumxn--0tr63uylumrf0vg06b.topscore 31· no DNS
punycode name和平精英皮膚 scripts=CJKrandom-looking nameH=3.78TLD with a high abuse ratetop
Mediumxn--0tr63uylumrfvmf62d.topscore 31· active website
punycode name和平精英皮肤 scripts=CJKrandom-looking nameH=3.82TLD with a high abuse ratetop
Mediumxn--1lq15g3nf4a873fvd3a.topscore 31· no DNS
punycode name北京華油合創 scripts=CJKrandom-looking nameH=3.78TLD with a high abuse ratetop
Mediumxn--1lqp7ftvalg86au79h.topscore 31· redirects elsewhere
punycode name北京华油合创 scripts=CJKrandom-looking nameH=4.02TLD with a high abuse ratetop
Mediumxn--3bs5u22mo71bppn7e937e.topscore 31· no DNS
punycode name城市组设计集团 scripts=CJKrandom-looking nameH=3.80TLD with a high abuse ratetop
Mediumxn--6fr041djfgmk2a.topscore 31· no web server
punycode name电动汽车 scripts=CJKrandom-looking nameH=3.88TLD with a high abuse ratetop
Mediumxn--9qvtc385gh3o.topscore 31· no DNS
punycode name遠東耐材 scripts=CJKrandom-looking nameH=3.66TLD with a high abuse ratetop
Mediumxn--b9wx47bh7aj20ae7i.topscore 31· no DNS
punycode name萬源馬鈴薯 scripts=CJKrandom-looking nameH=3.68TLD with a high abuse ratetop
Mediumxn--chq060fm1pezn8ug.topscore 31· no DNS
punycode name万源马铃薯 scripts=CJKrandom-looking nameH=3.95TLD with a high abuse ratetop
Mediumxn--dpqy9iisfl33c.topscore 31· no DNS
punycode name古艺传奇 scripts=CJKrandom-looking nameH=3.64TLD with a high abuse ratetop
Mediumxn--fctw2eo8hez5a.topscore 31· no DNS
punycode name家庭教育 scripts=CJKrandom-looking nameH=3.77TLD with a high abuse ratetop
Mediumxn--fjq89somreuci18c.topscore 31· no DNS
punycode name深圳欢乐谷 scripts=CJKrandom-looking nameH=3.95TLD with a high abuse ratetop
Mediumxn--gtvr8mi9uflw.topscore 31· no DNS
punycode name鹽源蘋果 scripts=CJKrandom-looking nameH=3.81TLD with a high abuse ratetop
Mediumxn--kpvt1am42ggxd.topscore 31· no DNS
punycode name阳朔金桔 scripts=CJKrandom-looking nameH=3.64TLD with a high abuse ratetop
Mediumxn--kpvt1am42gw5d.topscore 31· no DNS
punycode name陽朔金桔 scripts=CJKrandom-looking nameH=3.91TLD with a high abuse ratetop

Same data as JSON: /api/zone/risk?day=2026-08-28&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.