Flagged newborn domains, Monday, August 31, 2026

72 names at tier low or above in .icu, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highadobedoc.icuscore 52echoes adobe· robots.txt denied
brand in the nameadobeTLD with a high abuse rateicubrand name behind Cloudflarecloudflare.combrand name at a retail registrarPDR Ltd. d/b/a PublicDomainRegistry.com
Hightelegramm.icuscore 52echoes telegram· no DNS
brand in the nametelegramTLD with a high abuse rateicubrand name at a retail registrarGname.com Pte. Ltd.brand name at a watch-list registrarGname.com Pte. Ltd.
Highabrano-ex.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 70%. An opinion, not a finding.

Highblitz-ex.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 62%. An opinion, not a finding.

Highblockar-ex.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.

Highcedricxtipo.icuscore 46· blocked the probe
TLD with a high abuse rateicubrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highcrown-ex.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 62%. An opinion, not a finding.

Highdenavo-ex.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.

Highforte-ex.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highgrollo-ex.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 62%. An opinion, not a finding.

Highnorve-ex.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 62%. An opinion, not a finding.

Highorion-ex.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 58%. An opinion, not a finding.

Highpads928437.icuscore 46· redirects elsewhere
TLD with a high abuse rateicubrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 62%. An opinion, not a finding.

Hightitan-ex.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highvektor-ex.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 70%. An opinion, not a finding.

Highvelma-ex.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 70%. An opinion, not a finding.

Highvelto-ex.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highxentra-ex.icuscore 46· active website
TLD with a high abuse rateicubrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 65%. An opinion, not a finding.

Highweb-mobile.icuscore 44echoes tmobile· placeholder page
one-letter brand typomobile≈tmobileTLD with a high abuse rateicubrand name at a retail registrarHosting Concepts B.V. d/b/a Registrar.eu

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Mediumxn--74qw8fa164cxtlq5h.icuscore 31· no web server
punycode name杨克成哈威哈 scripts=CJKrandom-looking nameH=3.93TLD with a high abuse rateicu
Mediumdaivanphat.icuscore 30· active website
TLD with a high abuse rateicupage impersonates a brandPayPal
Mediumbattlefielgloveobsee.icuscore 28· active website
TLD with a high abuse rateicubrand in page title, not in the namegoogle
Mediumcriptch.icuscore 28· parked, for sale
TLD with a high abuse rateicubrand in page title, not in the namecloudflare
Mediumdocsigns-online.icuscore 28· blocked the probe
TLD with a high abuse rateicubrand in page title, not in the namecloudflare
Mediumhelp-desks.icuscore 28· empty page
lure words (login, verify, secure…)help,helpdeskTLD with a high abuse rateicufree DNS providerdnsowl.com
Mediumkaching.icuscore 28· active website
TLD with a high abuse rateicubrand in page title, not in the nameshopify
Mediumlonvaco.icuscore 28· empty page
TLD with a high abuse rateicubrand in page title, not in the nametelegram
Mediummanbube.icuscore 28· empty page
TLD with a high abuse rateicubrand in page title, not in the nametelegram
Mediummarsbahis-amp4.icuscore 28· blocked the probe
TLD with a high abuse rateicubrand in page title, not in the namecloudflare
Mediumonwine-2026.icuscore 28· blocked the probe
TLD with a high abuse rateicubrand in page title, not in the namecloudflare
Mediumpalacebet-erisim.icuscore 28· blocked the probe
TLD with a high abuse rateicubrand in page title, not in the namecloudflare
Mediumpusulabet-resmigirisim2026.icuscore 28· blocked the probe
TLD with a high abuse rateicubrand in page title, not in the namecloudflare
Mediumsub1s.icuscore 28· active website
TLD with a high abuse rateicubrand in page title, not in the namefacebook
Mediumsuperbex1999.icuscore 28· blocked the probe
TLD with a high abuse rateicubrand in page title, not in the namecloudflare
Mediumtelefcxeos.icuscore 28· empty page
TLD with a high abuse rateicubrand in page title, not in the nametelegram
Mediumteleformul.icuscore 28· empty page
TLD with a high abuse rateicubrand in page title, not in the nametelegram
Mediumteleguidep.icuscore 28· empty page
TLD with a high abuse rateicubrand in page title, not in the nametelegram
Mediumteleidelng.icuscore 28· empty page
TLD with a high abuse rateicubrand in page title, not in the nametelegram
Mediumtelelproxo.icuscore 28· empty page
TLD with a high abuse rateicubrand in page title, not in the nametelegram
Mediumzippydoweb.icuscore 28· other
TLD with a high abuse rateicubrand in page title, not in the namecloudflare
Mediumxn--r8j.icuscore 26· active website
punycode nameえ scripts=HIRAGANATLD with a high abuse rateicu
Lowcontractspace.icuscore 16· no DNS
TLD with a high abuse rateicufree DNS providerdnsowl.com
Lowbahsegel-hemen-giris-aktif.icuscore 14· placeholder page
many hyphens3TLD with a high abuse rateicu
Lowbetgit-bonus-online.icuscore 14· server error
lure words (login, verify, secure…)bonusTLD with a high abuse rateicu
Lowbetzula-hemen-giris-aktif.icuscore 14· placeholder page
many hyphens3TLD with a high abuse rateicu
Lowcheck-payment.icuscore 14· no web server
lure words (login, verify, secure…)paymentTLD with a high abuse rateicu
Lowgrandpashabetbonus-hemen.icuscore 14· server error
lure words (login, verify, secure…)bonusTLD with a high abuse rateicu
Lowjojobet-bonusgirisii.icuscore 14· placeholder page
lure words (login, verify, secure…)bonusTLD with a high abuse rateicu
Lowmaltbahis-hizli-tr-giris.icuscore 14· placeholder page
many hyphens3TLD with a high abuse rateicu
Lowmarsbahis-bonusal.icuscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse rateicu

Same data as JSON: /api/zone/risk?day=2026-08-31&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.