Flagged newborn domains, Wednesday, September 2, 2026

280 names at tier low or above in .site, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalmaps-lcloud.sitescore 82echoes icloud· active website
one-letter brand typolcloud≈icloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarEuroDNS S.A.page impersonates a brandPayPal+1 more

Model opinion: looks like abuse (target: Apple iCloud), confidence 72%. An opinion, not a finding.

Criticalfidelityhub.sitescore 62echoes fidelity· active website
brand in the namefidelitybrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.form on a brand-styled pagehas_form

Model opinion: suspicious, confidence 58%. An opinion, not a finding.

Criticalgurwinder.sitescore 60· active website
page impersonates a brandMicrosoft 365brand in page title, not in the namemicrosoftform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 97%. An opinion, not a finding.

Highroblox-tool.sitescore 59echoes roblox· active website
brand in the namerobloxbrand name behind Cloudflarecloudflare.combrand name at a retail registrarAtak Domain Bilgi Teknolojileri A.Ş.brand name and brand-styled pageroblox

Model opinion: looks like abuse (target: Roblox), confidence 66%. An opinion, not a finding.

Highadobet88area.sitescore 55echoes adobe· empty page
brand in the nameadobebrand plus digitsadobet88areabrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.+1 more

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highadobet88indo.sitescore 55echoes adobe· empty page
brand in the nameadobebrand plus digitsadobet88indobrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.+1 more

Model opinion: suspicious, confidence 62%. An opinion, not a finding.

Highlucky-win-strike.sitescore 55echoes stripe· server error
one-letter brand typostrike≈stripelure words (login, verify, secure…)winbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.+1 more

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highgowinbestepicgames.sitescore 54echoes epicgames· boilerplate page
brand in the nameepicgamesbrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLCidentical page on many newborns1424 identical pages

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highshoptiktok.sitescore 50echoes tiktok· no DNS
brand in the nametiktokbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highcustomwordpress.sitescore 44echoes wordpress· no DNS
brand in the namewordpressbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highcopperhorse.sitescore 42· active website
page impersonates a brandBinancebrand in page title, not in the namebinance

Model opinion: looks like a scam, confidence 65%. An opinion, not a finding.

Highevietrader.sitescore 42· active website
page impersonates a brandBinancebrand in page title, not in the namebinance

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highsend-usdt.sitescore 42· active website
page impersonates a brandBinancebrand in page title, not in the namebinance
Medium1stdibs.sitescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumarrowproof.sitescore 38· active website
brand in page title, not in the namerobinhoodform on a brand-styled pagehas_form
Mediumbarmejle.sitescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumconsolalista.sitescore 38· active website
brand in page title, not in the namexboxform on a brand-styled pagehas_form
Mediumdomainrankers.sitescore 38· redirects elsewhere
brand in page title, not in the namexboxform on a brand-styled pagehas_form
Mediumezychoice.sitescore 38· active website
brand in page title, not in the nameshopifyform on a brand-styled pagehas_form
Mediumimersaocripto.sitescore 38· active website
brand in page title, not in the nametrezorform on a brand-styled pagehas_form
Mediuminamsurgical.sitescore 38· parked with ads
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumkfsportswear.sitescore 38· parked with ads
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumkitchenharbor.sitescore 38· active website
brand in page title, not in the nameamazonform on a brand-styled pagehas_form
Mediumleadmanager-ai.sitescore 38· active website
brand in page title, not in the nametelegramform on a brand-styled pagehas_form
Mediummhsrrrahas.sitescore 38· blocked the probe
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediummhsrrrbhas.sitescore 38· blocked the probe
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediummhsrrrchas.sitescore 38· blocked the probe
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediummhssrrrdhas.sitescore 38· blocked the probe
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumphimtronbo.sitescore 38· redirects elsewhere
brand in page title, not in the nametiktokform on a brand-styled pagehas_form
Mediumpraxuden.sitescore 38· active website
brand in page title, not in the namebookingform on a brand-styled pagehas_form
Mediumprimefleetgroup.sitescore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumsecopssignal.sitescore 38· active website
brand in page title, not in the namemicrosoftform on a brand-styled pagehas_form
Mediumskygram.sitescore 38· active website
brand in page title, not in the nametelegramform on a brand-styled pagehas_form
Mediumstudiofonsmerkies.sitescore 38· active website
brand in page title, not in the namefidelityform on a brand-styled pagehas_form
Mediumt-gazelle.sitescore 38echoes zelle· no web server
brand in the namezellebrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Mediumbov-mobile.sitescore 36echoes tmobile· active website
one-letter brand typomobile≈tmobilebrand name at a retail registrarUltahost, Inc.
Mediumlebger-panel.sitescore 36echoes ledger· no web server
one-letter brand typolebger≈ledgerbrand name at a retail registrarGoDaddy.com, LLC
Mediumnansenai-refund.sitescore 36· active website
lure words (login, verify, secure…)refundpage asks for credentialsverify your identity
Mediumwhatapp.sitescore 36echoes whatsapp· no DNS
one-letter brand typowhatapp≈whatsappbrand name at a retail registrarNameMart Pte. Ltd.
Mediumpayment-portal.sitescore 32· blocked the probe
lure words (login, verify, secure…)payment,portalbrand in page title, not in the namecloudflare
Mediumzburator-services.sitescore 32· active website
lure words (login, verify, secure…)service,servicesbrand in page title, not in the namewordpress
Mediumambrosiacollective.sitescore 30· active website
free DNS providerdnsowl.compage impersonates a brandPaypal
Mediumatendimentofacil.sitescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns86 identical pages
Mediumcasadopicolesja.sitescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns86 identical pages
Mediumcronjobs.sitescore 30· active website
page asks for credentialsLog in to your account
Mediumevogennutrition.sitescore 30· active website
free DNS providerdnsowl.compage impersonates a brandPaypal
Mediumfaculdaderells.sitescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns86 identical pages
Mediumget-vapofil.sitescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns86 identical pages
Mediumgloballtrust.sitescore 30· active website
page asks for credentialsSign in to your account
Mediumhumnutrition.sitescore 30· active website
free DNS providerdnsowl.compage impersonates a brandPaypal

Same data as JSON: /api/zone/risk?day=2026-09-02&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.