Flagged newborn domains, Thursday, September 3, 2026

154 names at tier low or above in .sbs, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticaljapan-222-tikktok.sbsscore 78echoes tiktok· active website
one-letter brand typotikktok≈tiktokbrand plus digitsjapan-222-tikktokTLD with a high abuse ratesbsbrand name at a retail registrarNameCheap, Inc.+2 more

Model opinion: looks like abuse (target: TikTok), confidence 91%. An opinion, not a finding.

Criticaljapan-333-tikktok.sbsscore 78echoes tiktok· active website
one-letter brand typotikktok≈tiktokbrand plus digitsjapan-333-tikktokTLD with a high abuse ratesbsbrand name at a retail registrarNameCheap, Inc.+2 more

Model opinion: looks like abuse (target: TikTok), confidence 93%. An opinion, not a finding.

Criticaljapan-44-tikktok.sbsscore 78echoes tiktok· active website
one-letter brand typotikktok≈tiktokbrand plus digitsjapan-44-tikktokTLD with a high abuse ratesbsbrand name at a retail registrarNameCheap, Inc.+2 more

Model opinion: looks like abuse (target: TikTok), confidence 93%. An opinion, not a finding.

Criticalmercado-pago-slots.sbsscore 76echoes mercadopago· active website
brand in the namemercadopagoTLD with a high abuse ratesbsbrand name behind Cloudflarecloudflare.combrand name at a retail registrarPorkbun LLC+2 more

Model opinion: looks like abuse (target: Mercado Pago), confidence 68%. An opinion, not a finding.

Criticalhdmovie2a.sbsscore 68· active website
TLD with a high abuse ratesbspage impersonates a brandNetflixbrand in page title, not in the namenetflixform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 95%. An opinion, not a finding.

Highlebger.sbsscore 56echoes ledger· active website
one-letter brand typolebger≈ledgerTLD with a high abuse ratesbsbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITED+1 more

Model opinion: looks like abuse (target: Ledger), confidence 72%. An opinion, not a finding.

Highlcloud-located.sbsscore 55echoes icloud· boilerplate page
one-letter brand typolcloud≈icloudTLD with a high abuse ratesbsbrand name on a rarely-seen nameserversoportedns.topbrand name at a retail registrarNameSilo, LLC+2 more

Model opinion: looks like abuse (target: Apple), confidence 72%. An opinion, not a finding.

Highqastaff-corsairs-webmail-mobile.sbsscore 55echoes tmobile· no DNS
one-letter brand typomobile≈tmobilemany hyphens3very long name31TLD with a high abuse ratesbs+2 more
Hightaobaob8.sbsscore 55echoes taobao· not probed yet
brand in the nametaobaobrand plus digitstaobaob8TLD with a high abuse ratesbsbrand name at a retail registrarDynadot Inc+1 more
Highchatgptrupay.sbsscore 52echoes chatgpt· no web server
brand in the namechatgptTLD with a high abuse ratesbsbrand name at a retail registrarWeb Commerce Communications Limited dba brand name at a watch-list registrarWeb Commerce Communications Limited dba
Highdawat.sbsscore 52· active website
TLD with a high abuse ratesbspage asks for credentialsSign in to your accountlogin formhas_form+login words

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highkendejijc.sbsscore 50· active website
TLD with a high abuse ratesbspage impersonates a brandNetflixbrand in page title, not in the nametiktok

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highkikunoi.sbsscore 46· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highklarblick.sbsscore 46· active website
TLD with a high abuse ratesbsbrand in page title, not in the nametiktokform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 52%. An opinion, not a finding.

Highmaps-apple.sbsscore 42echoes apple· boilerplate page
ambiguous brand wordappleTLD with a high abuse ratesbsbrand name on a rarely-seen nameserversoportedns.topbrand name at a retail registrarNameSilo, LLC+2 more
Mediumcomeceagora.sbsscore 38· registrar placeholder
TLD with a high abuse ratesbsbrand in page title, not in the namehostingeridentical page on many newborns128 identical pages
Mediumchain-fin-dexair-france.sbsscore 36· active website
many hyphens3TLD with a high abuse ratesbspage impersonates a brandCoinbase
Mediumsupport87u.sbsscore 34· blocked the probe
lure words (login, verify, secure…)supportTLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumtrulybillingtank90.sbsscore 34· blocked the probe
lure words (login, verify, secure…)billingTLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumrecognizedstatementinappropriate58.sbsscore 32· blocked the probe
very long name34TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumringtonepopularityelectrical61.sbsscore 32· blocked the probe
very long name30TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumavenivesolvoral-france.sbsscore 30· active website
TLD with a high abuse ratesbspage impersonates a brandCoinbase
Mediumcorvusintelligence-france.sbsscore 30· active website
TLD with a high abuse ratesbspage impersonates a brandCoinbase
Mediumcouponeau-france.sbsscore 30· active website
TLD with a high abuse ratesbspage impersonates a brandCoinbase
Mediumdruidsoffer.sbsscore 30· active website
TLD with a high abuse ratesbspage impersonates a brandFedEx
Mediumedgejc.sbsscore 30· active website
TLD with a high abuse ratesbspage impersonates a brandNetflix
Mediumirsly.sbsscore 30· active website
TLD with a high abuse ratesbspage impersonates a brandIRS
Mediumnacrefondivo-france.sbsscore 30· active website
TLD with a high abuse ratesbspage impersonates a brandCoinbase
Mediumswaptaire-france.sbsscore 30· active website
TLD with a high abuse ratesbspage impersonates a brandCoinbase
Mediumaccuratelystatewidemit69.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumadriatradeai.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumarisefriendsbold57.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumartintimatecourts35.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumcountydrivesticker43.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumdiagnosislikelyduncan37.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumdscswedenindicate74.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumenabledvisualoutlined21.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumenvelopecollectiveapply57.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumhkbet138.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediuminstall-documentation.sbsscore 28· active website
TLD with a high abuse ratesbsbrand in page title, not in the namedocusign
Mediumjimorhay61.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumloansprintsvalue76.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediummontgomerydonaldtiffany45.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumobjelderpartners58.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumpartsballsattitude47.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumproposedcountriesrated74.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumpspwellintense27.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumreceivableservices.sbsscore 28· robots.txt denied
lure words (login, verify, secure…)service,servicesTLD with a high abuse ratesbsfree DNS providerdnsowl.com
Mediumrescuevalleydam16.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare
Mediumrichardsonhardlyutilize71.sbsscore 28· blocked the probe
TLD with a high abuse ratesbsbrand in page title, not in the namecloudflare

Same data as JSON: /api/zone/risk?day=2026-09-03&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.