Flagged newborn domains, Tuesday, September 1, 2026

1,270 names at tier low or above in .top, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticaltesla-ai.topscore 87echoes tesla· active website
ambiguous brand wordteslaTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.+4 more

Model opinion: looks like a scam (target: Tesla), confidence 94%. An opinion, not a finding.

Criticalstarlink4dyes.topscore 86echoes starlink· active website
brand in the namestarlinkbrand plus digitsstarlink4dyesTLD with a high abuse ratetopfree DNS providerdnsowl.com+3 more

Model opinion: looks like abuse, confidence 92%. An opinion, not a finding.

Criticalstarlink4don.topscore 84echoes starlink· active website
brand in the namestarlinkbrand plus digitsstarlink4donTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com+3 more

Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.

Criticalstarlinkcepat.topscore 76echoes starlink· active website
brand in the namestarlinkTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo,LLC+2 more

Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.

Criticaltelegram-m.topscore 61echoes telegram· active website
brand in the nametelegramTLD with a high abuse ratetopbrand name at a retail registrarPDR Ltd.brand name and brand-styled pagetelegram

Model opinion: looks like abuse (target: Telegram), confidence 72%. An opinion, not a finding.

Highjojobetmobile.topscore 58echoes tmobile· active website
brand in the nametmobileTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITED+1 more

Model opinion: looks like abuse, confidence 76%. An opinion, not a finding.

Hightelegramsk.topscore 58echoes telegram· active website
brand in the nametelegramTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.+1 more

Model opinion: looks like abuse, confidence 78%. An opinion, not a finding.

Highalipay-pan-cloud.topscore 55echoes alipay· parked, for sale
brand in the namealipayTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot LLC+3 more

Model opinion: looks like abuse (target: Alipay), confidence 76%. An opinion, not a finding.

Highapp1e-ic2.topscore 55echoes apple· no DNS
brand spelled with digitsapp1e-ic2→applebrand plus digitsapp1e-ic2TLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com+2 more
Highapp1e-ic4.topscore 55echoes apple· no DNS
brand spelled with digitsapp1e-ic4→applebrand plus digitsapp1e-ic4TLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com+2 more
Highbestbuyaccountonline.topscore 55echoes bestbuy· boilerplate page
brand in the namebestbuylure words (login, verify, secure…)accountlure suffixbestbuyaccountonlineTLD with a high abuse ratetop+3 more

Model opinion: looks like abuse (target: Best Buy), confidence 68%. An opinion, not a finding.

Highcm-cloud-management-platforms.topscore 55echoes icloud· boilerplate page
one-letter brand typocloud≈icloudmany hyphens3very long name29TLD with a high abuse ratetop+3 more

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highdocusign-review-sharedfile.topscore 55echoes docusign· robots.txt denied
brand in the namedocusignTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo,LLC+1 more
Highdt-cloud-web-ssecurity.topscore 55echoes icloud· boilerplate page
one-letter brand typocloud≈icloudlure words (login, verify, secure…)securitymany hyphens3TLD with a high abuse ratetop+3 more

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highic1oud-app1e.topscore 55echoes apple· no DNS
brand spelled with digitsic1oud-app1e→applebrand plus digitsic1oud-app1eTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com+2 more
Highjz-low-cost-cloud-management.topscore 55echoes icloud· not probed yet
one-letter brand typocloud≈icloudmany hyphens4very long name28TLD with a high abuse ratetop+2 more
Highlinemeurisefd.topscore 55echoes lineme· robots.txt denied
brand in the namelinemeTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo,LLC+1 more
Highmicrosoftteaams.topscore 55echoes microsoft· no DNS
brand in the namemicrosoftTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo,LLC+1 more
Highprimevideo-amazon.topscore 55echoes amazon· no DNS
brand in the nameamazonTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo,LLC+1 more
Highst3am.topscore 55echoes steam· no DNS
brand spelled with digitsst3am→steambrand plus digitsst3amTLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highwalmartmalls.topscore 55echoes walmart· empty page
brand in the namewalmartTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGname.com Pte. Ltd.+1 more

Model opinion: looks like phishing (target: Walmart), confidence 82%. An opinion, not a finding.

Highwalmartpd.topscore 55echoes walmart· boilerplate page
brand in the namewalmartTLD with a high abuse ratetopbrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLC+1 more

Model opinion: looks like abuse (target: Walmart), confidence 65%. An opinion, not a finding.

Highyl-cloud-web-ssecurity.topscore 55echoes icloud· boilerplate page
one-letter brand typocloud≈icloudlure words (login, verify, secure…)securitymany hyphens3TLD with a high abuse ratetop+3 more

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highh-cloud.topscore 54echoes icloud· boilerplate page
one-letter brand typocloud≈icloudTLD with a high abuse ratetopbrand name at a retail registrar成都西维数码科技有限公司identical page on many newborns76 identical pages

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highhatchleadfinder.topscore 52· active website
TLD with a high abuse ratetoppage asks for credentialsSign in to your accountlogin formhas_form+login words

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highjxebay.topscore 52echoes ebay· no DNS
brand in the nameebayTLD with a high abuse ratetopbrand name at a retail registrarGname.com Pte. Ltd.brand name at a watch-list registrarGname.com Pte. Ltd.
Highlootgrid.topscore 50· active website
TLD with a high abuse ratetoppage impersonates a brandPayPalbrand in page title, not in the namepaypal

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highstarking.topscore 50echoes starling· no DNS
one-letter brand typostarking≈starlingTLD with a high abuse ratetopbrand name at a retail registrarNameSilo,LLCbrand name at a watch-list registrarNameSilo,LLC
Highstrlink.topscore 50echoes starlink· blocked the probe
one-letter brand typostrlink≈starlinkTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarPDR Ltd.
Highweichat.topscore 50echoes wechat· active website
one-letter brand typoweichat≈wechatTLD with a high abuse ratetopbrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highxn--yet466a.topscore 48· active website
punycode name小款 scripts=CJKTLD with a high abuse ratetoppage impersonates a brandMetaMask

Model opinion: looks like abuse, confidence 88%. An opinion, not a finding.

Highbetist1853.topscore 46· blocked the probe
TLD with a high abuse ratetopbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highcasinobadhomburg.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highcasinocampione.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious (target: Google), confidence 72%. An opinion, not a finding.

Highcasinolugano.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highfafabong19.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Highfafasuper841.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the nametelegramform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Highintellectum.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the nameamazonform on a brand-styled pagehas_form

Model opinion: looks like phishing (target: Amazon), confidence 86%. An opinion, not a finding.

Highqbanks.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the nameamazonform on a brand-styled pagehas_form

Model opinion: looks like phishing (target: Amazon), confidence 85%. An opinion, not a finding.

Highsession-error-53290012.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the namewhatsappform on a brand-styled pagehas_form

Model opinion: looks like phishing (target: WhatsApp), confidence 96%. An opinion, not a finding.

Highstartshopino.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the namewordpressform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highuniversalis.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the nameamazonform on a brand-styled pagehas_form

Model opinion: looks like phishing (target: Amazon), confidence 88%. An opinion, not a finding.

Highvelorafurniture.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 92%. An opinion, not a finding.

Highwestwiind.topscore 46· blocked the probe
TLD with a high abuse ratetopbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highnocservices.topscore 40· redirects elsewhere
lure words (login, verify, secure…)service,servicesTLD with a high abuse ratetopbrand in page title, not in the namewhatsapp
punycode name重庆领天卓科技有限公司 scripts=CJKvery long name38random-looking nameH=4.63TLD with a high abuse ratetop
punycode name重慶領天卓科技有限公司 scripts=CJKvery long name38random-looking nameH=4.50TLD with a high abuse ratetop
punycode name超自然申訴查詢官網 scripts=CJKvery long name31random-looking nameH=4.35TLD with a high abuse ratetop
Mediumxn--kbt19zoihy6dczp4xdqvw0fav8l.topscore 35· active website
punycode name超自然申诉查询官网 scripts=CJKvery long name31random-looking nameH=4.58TLD with a high abuse ratetop
Mediumamcservice.topscore 34· redirects elsewhere
lure words (login, verify, secure…)serviceTLD with a high abuse ratetopbrand in page title, not in the namewhatsapp

Same data as JSON: /api/zone/risk?day=2026-09-01&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.