Flagged newborn domains, Thursday, September 3, 2026

29 names at tier high or above in .fun, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticallebger.funscore 94echoes ledger· active website
one-letter brand typolebger≈ledgerTLD with a high abuse ratefunbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITED+3 more

Model opinion: looks like phishing (target: Ledger), confidence 96%. An opinion, not a finding.

Criticalbinancebull.funscore 89echoes binance· active website
brand in the namebinanceTLD with a high abuse ratefunbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB+2 more

Model opinion: looks like a scam (target: Binance), confidence 93%. An opinion, not a finding.

Highcurve-finance.funscore 55echoes binance· empty page
one-letter brand typofinance≈binanceTLD with a high abuse ratefunbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITED+1 more

Model opinion: looks like abuse (target: Curve Finance), confidence 63%. An opinion, not a finding.

Highrobloxpons.funscore 55echoes roblox· no web server
brand in the namerobloxTLD with a high abuse ratefunbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo, LLC+1 more
Hightwitter-pump.funscore 55echoes twitter· no DNS
brand in the nametwitterTLD with a high abuse ratefunbrand name on a rarely-seen nameservergoogle.combrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITED+1 more
Highxaman-wallet.funscore 52· blocked the probe
lure words (login, verify, secure…)walletTLD with a high abuse ratefunbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highfamshare.funscore 50· active website
TLD with a high abuse ratefunpage impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highswipescantrade.funscore 50· active website
TLD with a high abuse ratefunpage impersonates a brandMetaMaskbrand in page title, not in the namemetamask

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highuthleth.funscore 50· active website
TLD with a high abuse ratefunpage impersonates a brandMetaMaskbrand in page title, not in the namerobinhood

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highyannis-cloud.funscore 50echoes icloud· no DNS
one-letter brand typocloud≈icloudTLD with a high abuse ratefunbrand name on a rarely-seen nameserverstratoserver.netbrand name at a retail registrarInterNetX GmbH
Highabble.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the nameappleform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.

Highbig5index.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: suspicious (target: Robinhood), confidence 72%. An opinion, not a finding.

Highbitbots.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 62%. An opinion, not a finding.

Highbuyearnretire.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 65%. An opinion, not a finding.

Highdaemonrun.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Highgotlegs.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highlotteryhood.funscore 46· placeholder page
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks like a scam (target: Robinhood), confidence 72%. An opinion, not a finding.

Highopenbell.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highplaydrop.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namesteamform on a brand-styled pagehas_form

Model opinion: suspicious (target: Steam), confidence 72%. An opinion, not a finding.

Highponstars.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highradarr.funscore 46· redirects elsewhere
TLD with a high abuse ratefunbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highrobinhoodfolklore.funscore 46echoes robinhood· active website
brand in the namerobinhoodTLD with a high abuse ratefunbrand name at a retail registrarName.com, Inc.

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highrobinhoodfrens.funscore 46echoes robinhood· placeholder page
brand in the namerobinhoodTLD with a high abuse ratefunbrand name at a retail registrarNicnames, Inc.

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highrobinhoodtrading.funscore 46echoes robinhood· no web server
brand in the namerobinhoodTLD with a high abuse ratefunbrand name at a retail registrarGoDaddy.com, LLC
Highrunneronhood.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 55%. An opinion, not a finding.

Highsibyl4663.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highsineboy.funscore 46· redirects elsewhere
TLD with a high abuse ratefunbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highsorn.funscore 46· active website
TLD with a high abuse ratefunbrand in page title, not in the nameuniswapform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highusdai-governance.funscore 46· blocked the probe
TLD with a high abuse ratefunbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form

Same data as JSON: /api/zone/risk?day=2026-09-03&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.