Flagged newborn domains, Thursday, September 3, 2026

1,454 names at tier low or above in .top, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticallebger.topscore 94echoes ledger· active website
one-letter brand typolebger≈ledgerTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITED+3 more

Model opinion: looks like phishing (target: Ledger), confidence 96%. An opinion, not a finding.

Criticalbestwebsitebuygmailaccount.topscore 91echoes gmail· active website
brand in the namegmaillure words (login, verify, secure…)accountTLD with a high abuse ratetopbrand name on a rarely-seen nameserversitechai.com+3 more

Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.

Criticalbingchatgpt.topscore 91echoes chatgpt· active website
brand in the namechatgptTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.+3 more

Model opinion: looks like abuse, confidence 88%. An opinion, not a finding.

Criticalamix.topscore 68· active website
TLD with a high abuse ratetoppage impersonates a brandApple IDbrand in page title, not in the namewordpressform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Criticalgooglefanyiping.topscore 61echoes google· active website
brand in the namegoogleTLD with a high abuse ratetopbrand name at a retail registrarDominet (HK) Limitedbrand name and brand-styled pagegoogle

Model opinion: looks like abuse (target: Google), confidence 82%. An opinion, not a finding.

Highmizuha.topscore 56echoes mizuho· active website
one-letter brand typomizuha≈mizuhoTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.+1 more

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highbalocoolmultiservices.topscore 55· redirects elsewhere
lure words (login, verify, secure…)service,servicesTLD with a high abuse ratetopbrand in page title, not in the namehubspotform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highc1-apple.topscore 55echoes apple· empty page
brand in the nameapplebrand plus digitsc1-appleTLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highchatgpt6.topscore 55echoes chatgpt· boilerplate page
brand in the namechatgptbrand plus digitschatgpt6TLD with a high abuse ratetopbrand name at a retail registrarWest263 International Limited+1 more

Model opinion: looks like abuse (target: OpenAI (ChatGPT)), confidence 72%. An opinion, not a finding.

Highcoinbasewallet.topscore 55echoes coinbase· no DNS
brand in the namecoinbaselure words (login, verify, secure…)walletTLD with a high abuse ratetopbrand name at a retail registrarPDR Ltd.
Highdx80x.topscore 55echoes xbox· not probed yet
brand spelled with digitsdx80x→xboxbrand plus digitsdx80xTLD with a high abuse ratetopbrand name at a retail registrarGoDaddy.com
Highebayreview-us.topscore 55echoes ebay· empty page
brand in the nameebayTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo,LLC+2 more

Model opinion: looks like phishing (target: eBay), confidence 72%. An opinion, not a finding.

Highhuluoboxu.topscore 55echoes hulu· boilerplate page
brand in the namehuluTLD with a high abuse ratetopbrand name at a retail registrar成都西维数码科技有限公司identical page on many newborns49 identical pages

Model opinion: looks benign, confidence 68%. An opinion, not a finding.

Highkmsvo.topscore 54· redirects elsewhere
TLD with a high abuse ratetopfree DNS providerdnsowl.combrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highzazino-mobile.topscore 54echoes tmobile· boilerplate page
one-letter brand typomobile≈tmobileTLD with a high abuse ratetopbrand name at a retail registrarPDR Ltd.identical page on many newborns184 identical pages

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highrobloxguard.topscore 52echoes roblox· no web server
brand in the namerobloxTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarPDR Ltd.
Highseg-bbva.topscore 52echoes bbva· server error
brand in the namebbvaTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarPDR Ltd.

Model opinion: suspicious (target: BBVA), confidence 72%. An opinion, not a finding.

Highstripeex.topscore 52echoes stripe· empty page
brand in the namestripeTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrargadomains

Model opinion: looks like a scam, confidence 75%. An opinion, not a finding.

Highwhatsappweba.topscore 52echoes whatsapp· no DNS
brand in the namewhatsappTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrar烟台帝思普网络科技有限公司
Highmydetails-a49b90b5f15ce514473.topscore 50· redirects elsewhere
very long name29TLD with a high abuse ratetopbrand in page title, not in the namenationwideform on a brand-styled pagehas_form

Model opinion: looks like phishing (target: Gumtree), confidence 66%. An opinion, not a finding.

Highxn--ks0a.topscore 48· active website
punycode name罪 scripts=CJKTLD with a high abuse ratetoppage impersonates a brandMetaMask

Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.

High1porno.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 68%. An opinion, not a finding.

Highappvulkancasino.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious (target: Google), confidence 75%. An opinion, not a finding.

Highencur.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the nameinstagramform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highice-casino-si.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks like abuse (target: Ice Casino), confidence 60%. An opinion, not a finding.

Highlvstart.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 56%. An opinion, not a finding.

Highponfamily.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Highponsfam.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highpornkai.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highpornomatorke.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 55%. An opinion, not a finding.

Highpornoprozeny.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highredcasino.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highrychlyprachyporno.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highsimpsnoviporno.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highspwcapital.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: suspicious (target: Robinhood), confidence 72%. An opinion, not a finding.

Highsuomipornoa.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Hightickermunch.topscore 46· blocked the probe
TLD with a high abuse ratetopbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Hightrezor-app.topscore 46echoes trezor· no DNS
brand in the nametrezorTLD with a high abuse ratetopbrand name at a retail registrar合肥聚名网络科技有限公司
Highundergroundporn.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highvga4fkfkvertfffrtggty.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 70%. An opinion, not a finding.

Highvideaporno.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highvintageporno.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highwhatsradar.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the namewhatsappform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 93%. An opinion, not a finding.

Highwhcashapp.topscore 46echoes cashapp· no DNS
brand in the namecashappTLD with a high abuse ratetopbrand name at a retail registrargadomains
Highxo2c47dn4vpo.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highyennie.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the namebookingform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highyoungporno.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highcloud-novel.topscore 44echoes icloud· no web server
one-letter brand typocloud≈icloudTLD with a high abuse ratetopbrand name at a retail registrar烟台帝思普网络科技有限公司
Mediumcwallet.topscore 36· active website
lure words (login, verify, secure…)walletTLD with a high abuse ratetoppage impersonates a brandMetaMask
Mediumicioudz.topscore 36· redirects elsewhere
TLD with a high abuse ratetopfree DNS providerdnsowl.combrand in page title, not in the nameapple

Same data as JSON: /api/zone/risk?day=2026-09-03&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.