Flagged newborn domains, Thursday, September 3, 2026

17 names at tier high or above in .shop, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalvanguardcarryworks.shopscore 63echoes vanguard· active website
brand in the namevanguardbrand name and brand-styled pagevanguardform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Criticalamazoneu.shopscore 62echoes amazon· active website
brand in the nameamazonbrand name at a retail registrarAlibaba Cloud Computing Ltd.brand name at a watch-list registrarAlibaba Cloud Computing Ltd.form on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highrobloxlimiteds.shopscore 55echoes roblox· redirects elsewhere
brand in the namerobloxlure words (login, verify, secure…)limitedbrand name at a retail registrarDynadot Inc.brand name at a watch-list registrarDynadot Inc.+2 more

Model opinion: looks like abuse (target: Roblox), confidence 62%. An opinion, not a finding.

Highrobloxrivals.shopscore 55echoes roblox· redirects elsewhere
brand in the namerobloxbrand name at a retail registrarDynadot Inc.brand name at a watch-list registrarDynadot Inc.brand name and brand-styled pageroblox+1 more

Model opinion: looks like abuse (target: Roblox), confidence 60%. An opinion, not a finding.

Highcloud-quay.shopscore 52echoes icloud· boilerplate page
one-letter brand typocloud≈icloudbrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLCidentical page on many newborns2226 identical pages

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highcloud-span.shopscore 52echoes icloud· boilerplate page
one-letter brand typocloud≈icloudbrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLCidentical page on many newborns2226 identical pages

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Hightiktok88shop.shopscore 52echoes tiktok· robots.txt denied
brand in the nametiktokbrand plus digitstiktok88shopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGoDaddy.com LLC
Highstripeex.shopscore 50echoes stripe· no DNS
brand in the namestripebrand name behind Cloudflarecloudflare.combrand name at a retail registrarGNAME.COM PTE. LTD.brand name at a watch-list registrarGNAME.COM PTE. LTD.
Hightwinspin77mobile.shopscore 49echoes tmobile· no DNS
brand spelled with digitstwinspin77mobile→tmobilebrand plus digitstwinspin77mobilebrand name behind Cloudflarecloudflare.com
Highxn--gestoestacionamento-yvb.shopscore 48· registrar placeholder
punycode namegestãoestacionamento scripts=LATINbrand in page title, not in the namehostingeridentical page on many newborns128 identical pages

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Hightheamazonia.shopscore 46echoes amazon· active website
brand in the nameamazonbrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.form on a brand-styled pagehas_form

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highamazonvipshop.shopscore 44echoes amazon· no DNS
brand in the nameamazonbrand name at a retail registrarGNAME.COM PTE. LTD.brand name at a watch-list registrarGNAME.COM PTE. LTD.
Highasvxghbravebay.shopscore 44echoes ebay· empty page
brand in the nameebaybrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.

Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.

Highasvxghjunglebay.shopscore 44echoes ebay· not probed yet
brand in the nameebaybrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.
Highwhatsappquevende.shopscore 44echoes whatsapp· no DNS
brand in the namewhatsappbrand name behind Cloudflarecloudflare.combrand name at a retail registrarPDR Ltd. d/b/a PublicDomainRegistry.com
Highfileform.shopscore 42· active website
page impersonates a brandPayPalbrand in page title, not in the namepaypal
Highztmobile.shopscore 40echoes tmobile· boilerplate page
brand in the nametmobileidentical page on many newborns97 identical pages

Same data as JSON: /api/zone/risk?day=2026-09-03&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.