Flagged newborn domains, Thursday, September 3, 2026

26 names at tier low or above in .website, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highmwhtestschemicloud.websitescore 50echoes icloud· active website
brand in the nameicloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Hightrust-wallet.websitescore 50echoes trustwallet· robots.txt denied
brand in the nametrustwalletlure words (login, verify, secure…)walletbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGlobal Domain Group LLC
Highstcs.websitescore 44· active website
page asks for credentialslogin to your accountlogin formhas_form+login words

Model opinion: looks benign, confidence 78%. An opinion, not a finding.

Mediumexpediaflights.websitescore 38echoes expedia· no DNS
brand in the nameexpediabrand name at a retail registrarGoDaddy.com, LLC
Mediumaccreator.websitescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns128 identical pages
Lowqarfina-japan.websitescore 22· active website
page impersonates a brandCoinbase
punycode name术前口服营养棋盘游戏 scripts=CJKvery long name34
Lowanaskhan.websitescore 20· placeholder page
brand in page title, not in the namegodaddy
Lowcadastropj.websitescore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowfatmi.websitescore 20· active website
brand in page title, not in the namenamecheap
Lowfikolo.websitescore 20· active website
brand in page title, not in the namewordpress
Lowforja.websitescore 20· active website
brand in page title, not in the namewhatsapp
Lowic3.websitescore 20· active website
brand in page title, not in the namewordpress
Lowkchelbusinesshub.websitescore 20· active website
brand in page title, not in the namenamecheap
Lowlumive.websitescore 20· other
brand in page title, not in the namecloudflare
Lowlungora.websitescore 20· active website
brand in page title, not in the namewordpress
Loworganizamais.websitescore 20· active website
brand in page title, not in the nametelegram
Lowsituspusathoki.websitescore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowyeu88.websitescore 20· server error
brand in page title, not in the namecloudflare
Lowxn--b1afpdqo7g.websitescore 18· boilerplate page
punycode nameселюков scripts=CYRILLIC
Lowxn--euromilhes-9bb.websitescore 18· active website
punycode nameeuromilhões scripts=LATIN
Lowxn--gebudereinigung-2kb.websitescore 18· active website
punycode namegebäudereinigung scripts=LATIN
Lowtrendies.websitescore 14· active website
page pushes urgent paymentLIMITED TIME OFFER
Lowbosch-services.websitescore 12· server error
lure words (login, verify, secure…)service,services
Lowfarbcode-knacken-mit-meiner-maus.websitescore 10· robots.txt denied
many hyphens4very long name32
many hyphens3very long name31

Same data as JSON: /api/zone/risk?day=2026-09-03&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.