Flagged newborn domains, Thursday, September 3, 2026

260 names at tier low or above in .app, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalslackroute.appscore 70echoes slack· active website
brand in the nameslackbrand name behind Cloudflarecloudflare.combrand name at a retail registrarSav.com, LLCbrand name at a watch-list registrarSav.com, LLC+1 more

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Criticalcontactz.appscore 60· active website
page impersonates a brandMicrosoft 365brand in page title, not in the nameappleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Criticalemailowl.appscore 60· active website
page impersonates a brandMicrosoft 365brand in page title, not in the nameicloudform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Criticaltrynodes.appscore 60· active website
page impersonates a brandMetaMaskbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highrobinhoodchain.appscore 59echoes robinhood· active website
brand in the namerobinhoodbrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudFlare, Inc.brand name and brand-styled pagerobinhood

Model opinion: looks like phishing (target: Robinhood), confidence 72%. An opinion, not a finding.

Highamazongpt.appscore 53echoes amazon· active website
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCbrand name and brand-styled pageamazon

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highadobecloud.appscore 50echoes adobe· server error
brand in the nameadobebrand name behind Cloudflarecloudflare.combrand name at a retail registrarSav.com, LLCbrand name at a watch-list registrarSav.com, LLC

Model opinion: suspicious (target: Adobe), confidence 65%. An opinion, not a finding.

Highcolnbase.appscore 48echoes coinbase· robots.txt denied
one-letter brand typocolnbase≈coinbasebrand name behind Cloudflarecloudflare.combrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highbytebay.appscore 44echoes ebay· no DNS
brand in the nameebaybrand name behind Cloudflarecloudflare.combrand name at a retail registrarOVH sas
Highcanvastemplate.appscore 44· active website
page asks for credentialsLogin to your Accountlogin formhas_form+login words

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highledjer.appscore 44echoes ledger· parked, for sale
one-letter brand typoledjer≈ledgerbrand name at a retail registrarAtom.com Domains LLCbrand name redirects elsewhereatom.com

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highlogitraq.appscore 44· active website
page asks for credentialsSign in to your accountlogin formhas_form+login words

Model opinion: unreachable when judged, confidence 95%. An opinion, not a finding.

Highmexbox.appscore 44echoes xbox· not probed yet
brand in the namexboxbrand name at a retail registrarDynadot LLC.brand name at a watch-list registrarDynadot LLC.
Mediumblackflux.appscore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumbooklisty.appscore 38· active website
brand in page title, not in the namebookingform on a brand-styled pagehas_form
Mediumcountertap.appscore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumcrewex.appscore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumfastestlap.appscore 38· active website
brand in page title, not in the namechaseform on a brand-styled pagehas_form
Mediumfixvitals.appscore 38· active website
brand in page title, not in the nameshopifyform on a brand-styled pagehas_form
Mediuminsightsrepo.appscore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumjamvaya.appscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumkumomail.appscore 38· active website
brand in page title, not in the namegmailform on a brand-styled pagehas_form
Mediumlinkingmkt.appscore 38· active website
brand in page title, not in the namelinkedinform on a brand-styled pagehas_form
Mediumlocra.appscore 38· active website
brand in page title, not in the nameinstagramform on a brand-styled pagehas_form
Mediummemecalendar.appscore 38· active website
brand in page title, not in the namephantomform on a brand-styled pagehas_form
Mediummuuzz.appscore 38· active website
brand in page title, not in the namebookingform on a brand-styled pagehas_form
Mediumoriginsupp.appscore 38· active website
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumperonda.appscore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumphantommobile.appscore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumplanelogs.appscore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumpricetwin.appscore 38· active website
brand in page title, not in the nameamazonform on a brand-styled pagehas_form
Mediumreplydar.appscore 38· active website
brand in page title, not in the nametiktokform on a brand-styled pagehas_form
Mediumreservify.appscore 38· active website
brand in page title, not in the nameinstagramform on a brand-styled pagehas_form
Mediumscivault.appscore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumscreezy.appscore 38· active website
brand in page title, not in the namezoomform on a brand-styled pagehas_form
Mediumshaashdigital.appscore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumstategen.appscore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumtexpas.appscore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumtling.appscore 38· active website
brand in page title, not in the nameledgerform on a brand-styled pagehas_form
Mediumvendemo.appscore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumvirtualride.appscore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumvivetravel.appscore 38· blocked the probe
brand in page title, not in the namebookingform on a brand-styled pagehas_form
Mediumweemay.appscore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumxmog.appscore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumyita.appscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumgen-finance.appscore 36echoes binance· active website
one-letter brand typofinance≈binancebrand name at a retail registrarName.com, Inc.
Mediumrayoscrm.appscore 36· active website
page impersonates a brandMicrosoft 365login formhas_form+login words
Mediumfish-fillets.appscore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns128 identical pages
Mediumlinkvelocity.appscore 30· active website
page asks for credentialsSign in to your account
Mediumperfumesupply.appscore 30· active website
page asks for credentialsSign in to your account

Same data as JSON: /api/zone/risk?day=2026-09-03&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.