Flagged newborn domains, Friday, August 28, 2026

19 names at tier high or above in .live, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highrobloxscript.livescore 56echoes roblox· active website
brand in the namerobloxbrand name at a retail registrarGoDaddy.com, LLCform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highroyalmaildelivery.livescore 55echoes royalmail· parked, for sale
brand in the nameroyalmaillure words (login, verify, secure…)deliverybrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Inc+3 more

Model opinion: looks like abuse (target: Royal Mail), confidence 78%. An opinion, not a finding.

Highauthorization21-ledger.livescore 52echoes ledger· no DNS
brand in the nameledgerbrand plus digitsauthorization21-ledgerbrand name behind Cloudflarecloudflare.combrand name at a retail registrarPDR Ltd. d/b/a PublicDomainRegistry.com
Highauthorization22-ledger.livescore 52echoes ledger· no DNS
brand in the nameledgerbrand plus digitsauthorization22-ledgerbrand name behind Cloudflarecloudflare.combrand name at a retail registrarPDR Ltd. d/b/a PublicDomainRegistry.com
Highauthorization23-ledger.livescore 52echoes ledger· no DNS
brand in the nameledgerbrand plus digitsauthorization23-ledgerbrand name behind Cloudflarecloudflare.combrand name at a retail registrarPDR Ltd. d/b/a PublicDomainRegistry.com
Highapp-adobe.livescore 50echoes adobe· blocked the probe
brand in the nameadobebrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highphotos-cloud-sync.livescore 48echoes icloud· empty page
one-letter brand typocloud≈icloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarSav.com, LLCbrand name at a watch-list registrarSav.com, LLC

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highmatritraders.livescore 44· active website
page asks for credentialslog in to your accountlogin formhas_form+login words

Model opinion: looks benign, confidence 78%. An opinion, not a finding.

Highmyupdate-ledger.livescore 44echoes ledger· no DNS
ambiguous brand wordledgerlure words (login, verify, secure…)updatebrand name behind Cloudflarecloudflare.combrand name at a retail registrarPDR Ltd. d/b/a PublicDomainRegistry.com
High1h9v4k6p0n8c3r7w5j.livescore 43· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
High2v9m5x1q8c3r7n0b6a.livescore 43· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
High3c9j2r8v5a1z7n4p6x.livescore 43· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
High6nq4c8x1r0v7j3s9ea.livescore 43· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
High7p3x6n1c9r4w0k8f2a.livescore 43· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highg8m1w5q2x6d9f4b7k0.livescore 43· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highk1x7r4e0m9b3h8q5sd.livescore 43· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highm5d8q2z7v3b1y6t9x0.livescore 43· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highy4k0s7m2q9h5d1v8be.livescore 43· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highlcl-finance.livescore 42echoes binance· no DNS
one-letter brand typofinance≈binancebrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB

Same data as JSON: /api/zone/risk?day=2026-08-28&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.