Flagged newborn domains, Monday, August 31, 2026

62 names at tier low or above in .vip, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticaltelegram-ka9.vipscore 67echoes telegram· active website
brand in the nametelegrambrand plus digitstelegram-ka9brand name behind Cloudflarecloudflare.combrand name at a retail registrarJuly Name Limited+1 more

Model opinion: looks like phishing (target: Telegram), confidence 60%. An opinion, not a finding.

Hightrustwallets.vipscore 55echoes trustwallet· no DNS
brand in the nametrustwalletlure words (login, verify, secure…)walletbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Inc+1 more
Highitau777.vipscore 46echoes itau· active website
brand in the nameitaubrand plus digitsitau777brand name at a retail registrarGoDaddy.com, LLC

Model opinion: looks like abuse (target: Itaú), confidence 78%. An opinion, not a finding.

Highdizipal-cloud.vipscore 42echoes icloud· active website
one-letter brand typocloud≈icloudbrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Mediumavavav5.vipscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumb78383.vipscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumcostcoep.vipscore 38echoes costco· no web server
brand in the namecostcobrand name at a retail registrarCommuniGal Communication Ltd.
Mediumtopazlounge.vipscore 38· active website
brand in page title, not in the namebookingform on a brand-styled pagehas_form
Mediumapps-buffalo.vipscore 28· active website
free DNS providerdnsowl.combrand in page title, not in the namegoogle
Mediumbuffalo-apps.vipscore 28· active website
free DNS providerdnsowl.combrand in page title, not in the namegoogle
Mediumbuffalo-games.vipscore 28· active website
free DNS providerdnsowl.combrand in page title, not in the namegoogle
Mediumbuffalo-go.vipscore 28· active website
free DNS providerdnsowl.combrand in page title, not in the namegoogle
Mediumbuffalo-play.vipscore 28· active website
free DNS providerdnsowl.combrand in page title, not in the namegoogle
Mediumgames-buffalo.vipscore 28· active website
free DNS providerdnsowl.combrand in page title, not in the namegoogle
Mediumwahtpp.vipscore 28· redirects elsewhere
free DNS providerdnsowl.combrand in page title, not in the namewhatsapp
Mediumwhsatpp.vipscore 28· redirects elsewhere
free DNS providerdnsowl.combrand in page title, not in the namewhatsapp
Lowxn--2zyt8fbwew3a.vipscore 23· no DNS
punycode name网站联盟 scripts=CJKrandom-looking nameH=3.66
Lowsmsignal.vipscore 22· active website
page impersonates a brandbinance
Low1818ab.vipscore 20· blocked the probe
brand in page title, not in the namecloudflare
Low9659kftz1.vipscore 20· active website
brand in page title, not in the namewordpress
Lowcrescenzoapprovals.vipscore 20· other
brand in page title, not in the namecloudflare
Lowdizipalorjun.vipscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowduoqq.vipscore 20· other
brand in page title, not in the namecloudflare
Lowgooo.vipscore 20· redirects elsewhere
brand in page title, not in the nametelegram
Lowimperiumai.vipscore 20· other
brand in page title, not in the namecloudflare
Lowkazansanagiris.vipscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowm77bet.vipscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowmarkas138kita.vipscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowsellerdesk.vipscore 20· active website
brand in page title, not in the nameamazon
Lowseries1.vipscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowsoikeonhacai5.vipscore 20· server error
brand in page title, not in the namecloudflare
Lowxemlinkvn.vipscore 20· redirects elsewhere
brand in page title, not in the nametelegram
Lowxn--10vu00h.vipscore 18· server error
punycode name梦雨 scripts=CJK
Lowxn--4kr58k.vipscore 18· redirects elsewhere
punycode name大单 scripts=CJK
Lowxn--65wm4sk4l.vipscore 18· redirects elsewhere
punycode name渣码虫 scripts=CJK
Lowxn--6krs7qi64a.vipscore 18· redirects elsewhere
punycode name南宫网 scripts=CJK
Lowxn--7-iq8c.vipscore 18· redirects elsewhere
punycode name苏7 scripts=CJK
Lowxn--80apgc0bd.vipscore 18· active website
punycode nameулитка scripts=CYRILLIC
Lowxn--8jwa.vipscore 18· redirects elsewhere
punycode name欣欣 scripts=CJK
Lowxn--9kq03im4y.vipscore 18· no DNS
punycode name北橙云 scripts=CJK
Lowxn--d1t43n.vipscore 18· redirects elsewhere
punycode name晓弟 scripts=CJK
Lowxn--d1tp0b.vipscore 18· redirects elsewhere
punycode name情弟 scripts=CJK
Lowxn--d6qw9b.vipscore 18· redirects elsewhere
punycode name南关 scripts=CJK
Lowxn--fxu517c.vipscore 18· redirects elsewhere
punycode name捞米 scripts=CJK
Lowxn--i8s071g.vipscore 18· redirects elsewhere
punycode name子航 scripts=CJK
Lowxn--kiv86n.vipscore 18· redirects elsewhere
punycode name星海 scripts=CJK
Lowxn--lntz5f.vipscore 18· redirects elsewhere
punycode name情崽 scripts=CJK
Lowxn--m0svn.vipscore 18· redirects elsewhere
punycode name嫖娼 scripts=CJK
Lowxn--ouwx6n.vipscore 18· server error
punycode name琴沐 scripts=CJK
Lowxn--rhyz12a.vipscore 18· redirects elsewhere
punycode name苏瑞 scripts=CJK

Same data as JSON: /api/zone/risk?day=2026-08-31&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.