Flagged newborn domains, Wednesday, September 2, 2026

20 names at tier medium or above in .live, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalmeet-google.livescore 62echoes google· active website
brand in the namegooglebrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLCform on a brand-styled pagehas_form

Model opinion: looks like phishing (target: Google), confidence 82%. An opinion, not a finding.

Higheubank-30.livescore 55echoes nubank· boilerplate page
one-letter brand typoeubank≈nubankbrand plus digitseubank-30brand name behind Cloudflarecloudflare.combrand name at a retail registrarPDR Ltd. d/b/a PublicDomainRegistry.com+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highfortunebayz.livescore 44echoes ebay· boilerplate page
brand in the nameebaybrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

High4xv0n7g2r9m1y5p8ds.livescore 43· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highdigiprime.livescore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks like abuse, confidence 76%. An opinion, not a finding.

Mediumbeetcoin.livescore 38· active website
brand in page title, not in the namerobinhoodform on a brand-styled pagehas_form
Mediume7q1z5u9c3k8a2w6fj.livescore 38· blocked the probe
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumgootube.livescore 38· placeholder page
brand in page title, not in the namerobinhoodform on a brand-styled pagehas_form
Mediumxnhd.livescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumupdateatoservice.livescore 32· blocked the probe
lure words (login, verify, secure…)service,updatebrand in page title, not in the namecloudflare
Mediumbudgetly.livescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns86 identical pages
Mediumonemoreplus.livescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns86 identical pages
Mediumsecondbrain.livescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns86 identical pages
Mediumcwallet.livescore 28· active website
lure words (login, verify, secure…)walletpage impersonates a brandMetaMask
Mediumtrendtrack.livescore 26· active website
lure words (login, verify, secure…)trackbrand in page title, not in the nameamazon
Medium5gk9w2c7m1x8q4v0rd.livescore 25· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflare
Mediumd8k2y5p1n7z4h9v3bt.livescore 25· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflare
Mediumn3z6p1h8y5t0b7j2fa.livescore 25· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflare
Mediumt9w3j6b0k8v2p5y1sz.livescore 25· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflare
Mediumz5p1v8k3w7a0t4g9ny.livescore 25· blocked the probe
random-looking nameH=4.17brand in page title, not in the namecloudflare

Same data as JSON: /api/zone/risk?day=2026-09-02&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.