Flagged newborn domains, Thursday, September 3, 2026

37 names at tier low or above in .help, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticaliphonecheck.helpscore 60· active website
page impersonates a brandApple IDbrand in page title, not in the nameicloudform on a brand-styled pagehas_form

Model opinion: suspicious (target: Apple), confidence 55%. An opinion, not a finding.

Highwechatupdate.helpscore 55echoes wechat· no DNS
brand in the namewechatlure words (login, verify, secure…)updatebrand name behind Cloudflarecloudflare.combrand name at a retail registrarPorkbun LLC+1 more
Highamazon-clientscare.helpscore 50echoes amazon· empty page
brand in the nameamazonbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC

Model opinion: looks like abuse (target: Amazon), confidence 72%. An opinion, not a finding.

Mediumid39210312-platform.helpscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediummorning-glass.helpscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediummortgageassistance.helpscore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns128 identical pages
Lowautoapply.helpscore 20· active website
brand in page title, not in the nameworkday
Lowcromaceramic.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowduepay-toll.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowevionsafety.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowfloordecorinc.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowhsckgqck4.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowiconicfloorsandmore.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowinets.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowinfodue-toll.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowinfopay-toll.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowmiamoindustries.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lownakshtratiles.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowpaydue-toll.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowservicesjre-eki-net.helpscore 20· no web server
lure words (login, verify, secure…)service,servicesfree DNS providerdnsowl.com
Lowtechbond.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowtechcentralweldingllc.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowtoll-duepay.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowtollfee-due.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowtollfee-unpaid.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowtollfees-due.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowtollfees-unpaid.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowunpaid-tollfee.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowweightronics.helpscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowwhats-app.helpscore 18echoes whatsapp· robots.txt denied
brand in the namewhatsappfree DNS providerdnsowl.com
Lowofficialjre-eki-net.helpscore 14· no web server
lure words (login, verify, secure…)officialfree DNS providerdnsowl.com
Lowrockwallets.helpscore 14· robots.txt denied
lure words (login, verify, secure…)walletfree DNS providerdnsowl.com
Lowsupport-iugu.helpscore 14· active website
lure words (login, verify, secure…)supportfree DNS providerdnsowl.com
Lowboo-casino-nz-login.helpscore 12· empty page
lure words (login, verify, secure…)loginmany hyphens3
Lowrbcsecurityportal.helpscore 12· empty page
lure words (login, verify, secure…)portal,security
Lowsecureppl-login.helpscore 12· robots.txt denied
lure words (login, verify, secure…)login,secure
Lowapple-at.helpscore 10echoes apple· active website
ambiguous brand wordapplebrand name behind Cloudflarecloudflare.com

Same data as JSON: /api/zone/risk?day=2026-09-03&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.