Flagged newborn domains, Wednesday, September 2, 2026

75 names at tier low or above in .live, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalmeet-google.livescore 62echoes google· active website
brand in the namegooglebrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLCform on a brand-styled pagehas_form

Model opinion: looks like phishing (target: Google), confidence 82%. An opinion, not a finding.

Higheubank-30.livescore 55echoes nubank· boilerplate page
one-letter brand typoeubank≈nubankbrand plus digitseubank-30brand name behind Cloudflarecloudflare.combrand name at a retail registrarPDR Ltd. d/b/a PublicDomainRegistry.com+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highfortunebayz.livescore 44echoes ebay· boilerplate page
brand in the nameebaybrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

High4xv0n7g2r9m1y5p8ds.livescore 43· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highdigiprime.livescore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks like abuse, confidence 76%. An opinion, not a finding.

Mediumbeetcoin.livescore 38· active website
brand in page title, not in the namerobinhoodform on a brand-styled pagehas_form
Mediume7q1z5u9c3k8a2w6fj.livescore 38· blocked the probe
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumgootube.livescore 38· placeholder page
brand in page title, not in the namerobinhoodform on a brand-styled pagehas_form
Mediumxnhd.livescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumupdateatoservice.livescore 32· blocked the probe
lure words (login, verify, secure…)service,updatebrand in page title, not in the namecloudflare
Mediumbudgetly.livescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns86 identical pages
Mediumonemoreplus.livescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns86 identical pages
Mediumsecondbrain.livescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns86 identical pages
Mediumcwallet.livescore 28· active website
lure words (login, verify, secure…)walletpage impersonates a brandMetaMask
Mediumtrendtrack.livescore 26· active website
lure words (login, verify, secure…)trackbrand in page title, not in the nameamazon
Medium5gk9w2c7m1x8q4v0rd.livescore 25· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflare
Mediumd8k2y5p1n7z4h9v3bt.livescore 25· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflare
Mediumn3z6p1h8y5t0b7j2fa.livescore 25· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflare
Mediumt9w3j6b0k8v2p5y1sz.livescore 25· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflare
Mediumz5p1v8k3w7a0t4g9ny.livescore 25· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflare
Lowalexgonzalezz.livescore 22· active website
page impersonates a brandBinance
Lowanticoforno.livescore 22· active website
page impersonates a brandPaypal
Lowbalkanfood.livescore 22· active website
page impersonates a brandPaypal
Lowbeirutpalace.livescore 22· active website
page impersonates a brandPaypal
Lowburger-vesterbro.livescore 22· active website
page impersonates a brandPaypal
Lowcexdex.livescore 22· active website
page impersonates a brandBinance
Lowdacavallino.livescore 22· active website
page impersonates a brandPaypal
Lowexclusivemine.livescore 22· active website
page impersonates a brandBinance
Lowil-castello.livescore 22· active website
page impersonates a brandPaypal
Lowilmolino.livescore 22· active website
page impersonates a brandPaypal
Lowlamela.livescore 22· active website
page impersonates a brandPaypal
Lowmegapizza.livescore 22· active website
page impersonates a brandPaypal
Lowmikipizza.livescore 22· active website
page impersonates a brandPaypal
Lowmospizza.livescore 22· active website
page impersonates a brandPaypal
Lowpiccolomondo.livescore 22· active website
page impersonates a brandPaypal
Lowpizzarella.livescore 22· active website
page impersonates a brandPaypal
Lowscamorza.livescore 22· active website
page impersonates a brandPaypal
Lowsquidgamebler.livescore 22· active website
page impersonates a brandNetflix
Lowstockz.livescore 22· active website
page impersonates a brandNetflix
Lowworld3ai.livescore 22· active website
page impersonates a brandMetaMask
Lowalphatradinghub.livescore 20· empty page
brand in page title, not in the namezoom
Lowatm4d2.livescore 20· parked, for sale
brand in page title, not in the namegodaddy
Lowbahsegel-bahsegel-girisii.livescore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowfinessemuse.livescore 20· active website
brand in page title, not in the namevenmo
Lowfritzpeeterschum.livescore 20· active website
brand in page title, not in the namewordpress
Lowgfbforum.livescore 20· active website
brand in page title, not in the nametelegram
Lowgoldenzero.livescore 20· active website
brand in page title, not in the nametelegram
Lowhocuspocus.livescore 20· redirects elsewhere
brand in page title, not in the namenationwide
Lowjphunter.livescore 20· active website
brand in page title, not in the namefacebook
Lowkooraconnect.livescore 20· active website
brand in page title, not in the nameapple

Same data as JSON: /api/zone/risk?day=2026-09-02&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.