Flagged newborn domains, Wednesday, September 2, 2026

13 names at tier high or above in .site, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalmaps-lcloud.sitescore 82echoes icloud· active website
one-letter brand typolcloud≈icloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarEuroDNS S.A.page impersonates a brandPayPal+1 more

Model opinion: looks like abuse (target: Apple iCloud), confidence 72%. An opinion, not a finding.

Criticalfidelityhub.sitescore 62echoes fidelity· active website
brand in the namefidelitybrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.form on a brand-styled pagehas_form

Model opinion: suspicious, confidence 58%. An opinion, not a finding.

Criticalgurwinder.sitescore 60· active website
page impersonates a brandMicrosoft 365brand in page title, not in the namemicrosoftform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 97%. An opinion, not a finding.

Highroblox-tool.sitescore 59echoes roblox· active website
brand in the namerobloxbrand name behind Cloudflarecloudflare.combrand name at a retail registrarAtak Domain Bilgi Teknolojileri A.Ş.brand name and brand-styled pageroblox

Model opinion: looks like abuse (target: Roblox), confidence 66%. An opinion, not a finding.

Highadobet88area.sitescore 55echoes adobe· empty page
brand in the nameadobebrand plus digitsadobet88areabrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.+1 more

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highadobet88indo.sitescore 55echoes adobe· empty page
brand in the nameadobebrand plus digitsadobet88indobrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.+1 more

Model opinion: suspicious, confidence 62%. An opinion, not a finding.

Highlucky-win-strike.sitescore 55echoes stripe· server error
one-letter brand typostrike≈stripelure words (login, verify, secure…)winbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.+1 more

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highgowinbestepicgames.sitescore 54echoes epicgames· boilerplate page
brand in the nameepicgamesbrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLCidentical page on many newborns1424 identical pages

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highshoptiktok.sitescore 50echoes tiktok· no DNS
brand in the nametiktokbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highcustomwordpress.sitescore 44echoes wordpress· no DNS
brand in the namewordpressbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highcopperhorse.sitescore 42· active website
page impersonates a brandBinancebrand in page title, not in the namebinance

Model opinion: looks like a scam, confidence 65%. An opinion, not a finding.

Highevietrader.sitescore 42· active website
page impersonates a brandBinancebrand in page title, not in the namebinance

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highsend-usdt.sitescore 42· active website
page impersonates a brandBinancebrand in page title, not in the namebinance

Same data as JSON: /api/zone/risk?day=2026-09-02&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.