Flagged newborn domains, Thursday, September 3, 2026

16 names at tier medium or above in .space, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highmobile-deposit-slots-top.spacescore 55echoes tmobile· boilerplate page
one-letter brand typomobile≈tmobilemany hyphens3brand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.+3 more

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Highrevolut-casinos-ie-go.spacescore 55echoes revolut· boilerplate page
brand in the namerevolutmany hyphens3brand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.+3 more

Model opinion: looks like abuse (target: Revolut), confidence 83%. An opinion, not a finding.

Higham-mobile.spacescore 48echoes tmobile· active website
one-letter brand typomobile≈tmobilebrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highcooking-with-paul.spacescore 48echoes booking· robots.txt denied
one-letter brand typocooking≈bookingbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highmcloud-dbx.spacescore 46echoes icloud· parked with ads
one-letter brand typomcloud≈icloudbrand name at a retail registrarIONOS SEidentical page on many newborns73 identical pages

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Hightrademeta.spacescore 42· active website
page impersonates a brandMetaMaskbrand in page title, not in the namemetamask
Mediumbrasahouse.spacescore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumbycvirtual.spacescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumcaramelovirtual.spacescore 38· active website
brand in page title, not in the namesantanderform on a brand-styled pagehas_form
Mediumcentralvip.spacescore 38· active website
brand in page title, not in the nameamazonform on a brand-styled pagehas_form
Mediumnewkitch.spacescore 38· active website
brand in page title, not in the nameamazonform on a brand-styled pagehas_form
Mediumnewsfeed.spacescore 38· active website
brand in page title, not in the nameledgerform on a brand-styled pagehas_form
Mediumpremiumtvdigital.spacescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumreyestvplus.spacescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumsaishashank.spacescore 38· active website
brand in page title, not in the namelinkedinform on a brand-styled pagehas_form
Mediumunlocktickets.spacescore 28· active website
lure words (login, verify, secure…)unlockpage impersonates a brandPayPal

Same data as JSON: /api/zone/risk?day=2026-09-03&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.