Flagged newborn domains, Thursday, September 3, 2026

145 names at tier low or above in .fun, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticallebger.funscore 94echoes ledger· active website
one-letter brand typolebger≈ledgerTLD with a high abuse ratefunbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITED+3 more

Model opinion: looks like phishing (target: Ledger), confidence 96%. An opinion, not a finding.

Criticalbinancebull.funscore 89echoes binance· active website
brand in the namebinanceTLD with a high abuse ratefunbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB+2 more

Model opinion: looks like a scam (target: Binance), confidence 93%. An opinion, not a finding.

Highcurve-finance.funscore 55echoes binance· empty page
one-letter brand typofinance≈binanceTLD with a high abuse ratefunbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITED+1 more

Model opinion: looks like abuse (target: Curve Finance), confidence 63%. An opinion, not a finding.

Highrobloxpons.funscore 55echoes roblox· no web server
brand in the namerobloxTLD with a high abuse ratefunbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo, LLC+1 more
Hightwitter-pump.funscore 55echoes twitter· no DNS
brand in the nametwitterTLD with a high abuse ratefunbrand name on a rarely-seen nameservergoogle.combrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITED+1 more
Highxaman-wallet.funscore 52· blocked the probe
lure words (login, verify, secure…)walletTLD with a high abuse ratefunbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highfamshare.funscore 50· active website
TLD with a high abuse ratefunpage impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highswipescantrade.funscore 50· active website
TLD with a high abuse ratefunpage impersonates a brandMetaMaskbrand in page title, not in the namemetamask

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highuthleth.funscore 50· active website
TLD with a high abuse ratefunpage impersonates a brandMetaMaskbrand in page title, not in the namerobinhood

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highyannis-cloud.funscore 50echoes icloud· no DNS
one-letter brand typocloud≈icloudTLD with a high abuse ratefunbrand name on a rarely-seen nameserverstratoserver.netbrand name at a retail registrarInterNetX GmbH
Highabble.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the nameappleform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.

Highbig5index.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: suspicious (target: Robinhood), confidence 72%. An opinion, not a finding.

Highbitbots.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 62%. An opinion, not a finding.

Highbuyearnretire.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 65%. An opinion, not a finding.

Highdaemonrun.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Highgotlegs.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highlotteryhood.funscore 46· placeholder page
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks like a scam (target: Robinhood), confidence 72%. An opinion, not a finding.

Highopenbell.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highplaydrop.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namesteamform on a brand-styled pagehas_form

Model opinion: suspicious (target: Steam), confidence 72%. An opinion, not a finding.

Highponstars.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highradarr.funscore 46· redirects elsewhere
TLD with a high abuse ratefunbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highrobinhoodfolklore.funscore 46echoes robinhood· active website
brand in the namerobinhoodTLD with a high abuse ratefunbrand name at a retail registrarName.com, Inc.

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highrobinhoodfrens.funscore 46echoes robinhood· placeholder page
brand in the namerobinhoodTLD with a high abuse ratefunbrand name at a retail registrarNicnames, Inc.

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highrobinhoodtrading.funscore 46echoes robinhood· no web server
brand in the namerobinhoodTLD with a high abuse ratefunbrand name at a retail registrarGoDaddy.com, LLC
Highrunneronhood.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 55%. An opinion, not a finding.

Highsibyl4663.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highsineboy.funscore 46· redirects elsewhere
TLD with a high abuse ratefunbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highsorn.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the nameuniswapform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highusdai-governance.funscore 46· blocked the probe
TLD with a high abuse ratefunbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumback2cards.funscore 38· registrar placeholder
TLD with a high abuse ratefunbrand in page title, not in the namehostingeridentical page on many newborns128 identical pages
Mediumcalculatorsol.funscore 38· registrar placeholder
TLD with a high abuse ratefunbrand in page title, not in the namehostingeridentical page on many newborns128 identical pages
Mediumnutrihealth.funscore 38· registrar placeholder
TLD with a high abuse ratefunbrand in page title, not in the namehostingeridentical page on many newborns128 identical pages
Mediumrobertas.funscore 38· registrar placeholder
TLD with a high abuse ratefunbrand in page title, not in the namehostingeridentical page on many newborns128 identical pages
Mediumskyhub.funscore 38· registrar placeholder
TLD with a high abuse ratefunbrand in page title, not in the namehostingeridentical page on many newborns128 identical pages
Mediumponstrack.funscore 34· active website
lure words (login, verify, secure…)trackTLD with a high abuse ratefunbrand in page title, not in the namerobinhood
Mediumcomuniqueinfluencietransforme.funscore 32· other
very long name29TLD with a high abuse ratefunbrand in page title, not in the namecloudflare
Mediumxn--2ssr6jd8jfu0c.funscore 31· empty page
punycode name梦幻镜头 scripts=CJKrandom-looking nameH=3.64TLD with a high abuse ratefun
Mediumflapdonation.funscore 30· active website
TLD with a high abuse ratefunpage impersonates a brandBinance
Mediumvitoriaanjos.funscore 30· active website
TLD with a high abuse ratefunpage impersonates a brandBinance
Mediumwoblarena.funscore 30· active website
TLD with a high abuse ratefunpage impersonates a brandMetaMask
Mediumacccmintwatcher.funscore 28· empty page
TLD with a high abuse ratefunbrand in page title, not in the namerobinhood
Mediumag2rlarnondiales.funscore 28· other
TLD with a high abuse ratefunbrand in page title, not in the namecloudflare
Mediumallcoinsinonehood.funscore 28· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhood
Mediumb52clubb.funscore 28· server error
TLD with a high abuse ratefunbrand in page title, not in the namecloudflare
Mediumblindpay.funscore 28· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhood
Mediumcameltoerh.funscore 28· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhood
Mediumcashmachines.funscore 28· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhood
Mediumcookboard.funscore 28· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhood
Mediumcrestflow.funscore 28· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhood
Mediumezqr.funscore 28· active website
TLD with a high abuse ratefunbrand in page title, not in the namegoogle

Same data as JSON: /api/zone/risk?day=2026-09-03&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.