Flagged newborn domains, Friday, August 28, 2026

11 names at tier high or above in .icu, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalwhatsappnew.icuscore 67echoes whatsapp· active website
brand in the namewhatsappTLD with a high abuse rateicubrand name at a retail registrarGname.com Pte. Ltd.brand name at a watch-list registrarGname.com Pte. Ltd.+1 more

Model opinion: looks like phishing (target: WhatsApp), confidence 97%. An opinion, not a finding.

Hightesla-invest24.icuscore 55echoes tesla· robots.txt denied
brand in the nameteslabrand plus digitstesla-invest24TLD with a high abuse rateicubrand name at a retail registrarGname.com Pte. Ltd.+1 more
Highaccountjaw.icuscore 52· redirects elsewhere
lure words (login, verify, secure…)accountTLD with a high abuse rateicubrand in page title, not in the namequickbooksform on a brand-styled pagehas_form
Highimajbetmobile.icuscore 52echoes tmobile· robots.txt denied
brand in the nametmobileTLD with a high abuse rateicubrand name behind Cloudflarecloudflare.combrand name at a retail registrarGLOBAL ASSET DOMAINS INC.
Highroketbetmobile.icuscore 52echoes tmobile· robots.txt denied
brand in the nametmobileTLD with a high abuse rateicubrand name behind Cloudflarecloudflare.combrand name at a retail registrarGLOBAL ASSET DOMAINS INC.
Highstalkea.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nameinstagramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.

Hightambet-siteadresi.icuscore 46· blocked the probe
TLD with a high abuse rateicubrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highxn--fs5a.icuscore 46· active website
punycode name青 scripts=CJKTLD with a high abuse rateicubrand in page title, not in the nameroblox

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Highzatesl-invest.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nameteslaform on a brand-styled pagehas_form

Model opinion: looks like a scam (target: Tesla / News24), confidence 95%. An opinion, not a finding.

Highpawpal.icuscore 44echoes paypal· no DNS
one-letter brand typopawpal≈paypalTLD with a high abuse rateicubrand name at a retail registrarDNSPod, Inc.
Hightesla-invest.icuscore 41echoes tesla· empty page
ambiguous brand wordteslaTLD with a high abuse rateicubrand name at a retail registrarGname.com Pte. Ltd.brand name at a watch-list registrarGname.com Pte. Ltd.+1 more

Model opinion: looks like a scam (target: Tesla), confidence 94%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-08-28&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.