Flagged newborn domains, Monday, August 31, 2026

11 names at tier high or above in .site, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalairb2b.sitescore 62echoes airbnb· active website
one-letter brand typoairb2b≈airbnbbrand plus digitsairb2bbrand name at a retail registrarName.com, Inc.form on a brand-styled pagehas_form

Model opinion: suspicious (target: Airbnb), confidence 72%. An opinion, not a finding.

Criticalmeet-qoogle.sitescore 62echoes google· active website
one-letter brand typoqoogle≈googlebrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.brand in page title, not in the namegoogle

Model opinion: looks like phishing (target: Google), confidence 95%. An opinion, not a finding.

Criticaldzfire.sitescore 60· active website
page impersonates a brandPaypalbrand in page title, not in the namepaypalform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highxn--80aaaac4ebcbf.sitescore 56· active website
punycode nameнанобанана scripts=CYRILLICbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 55%. An opinion, not a finding.

Highepicgamessupport.sitescore 55echoes epicgames· registrar placeholder
brand in the nameepicgameslure words (login, verify, secure…)supportbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.+1 more

Model opinion: looks like abuse (target: Epic Games), confidence 78%. An opinion, not a finding.

Highshizhicloud.sitescore 50echoes icloud· no DNS
brand in the nameicloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarAlibaba Cloud Computing Ltd. d/b/a HiChibrand name at a watch-list registrarAlibaba Cloud Computing Ltd. d/b/a HiChi
Highesteghlaaltwitter.sitescore 44echoes twitter· placeholder page
brand in the nametwitterbrand name on a rarely-seen nameserverviphost-dns.combrand name at a retail registrarCSL Computer Service Langenbach GmbH d/b

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highmysiyapath.sitescore 44· active website
page asks for credentialsVerify your identitylogin formhas_form+login words

Model opinion: looks like phishing (target: Siyapatha / Mysiyapatha (Sri Lankan financial brand)), confidence 93%. An opinion, not a finding.

Highicioud-ia.sitescore 42echoes icloud· robots.txt denied
one-letter brand typoicioud≈icloudbrand name on a rarely-seen nameserverhostwindsdns.combrand name at a retail registrarAtak Domain Bilgi Teknolojileri A.Ş.
Highshortmeme.sitescore 42· active website
page impersonates a brandBinancebrand in page title, not in the namebinance

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Hightradeomnix.sitescore 42· active website
page impersonates a brandMetaMaskbrand in page title, not in the namerobinhood

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-08-31&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.