Flagged newborn domains, Friday, September 4, 2026

2,907 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highxn--icld-xqa2c.comscore 42echoes icloud
punycode name “iclôüd scripts=LATIN”brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highxn--icld-xqa4a.comscore 42echoes icloud
punycode name “iclôùd scripts=LATIN”brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highxn--icld-xqa6b.comscore 42echoes icloud
punycode name “iclôûd scripts=LATIN”brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highxn--iclod-hva.comscore 42echoes icloud
punycode name “icloûd scripts=LATIN”brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highxn--iclod-nva.comscore 42echoes icloud
punycode name “icloüd scripts=LATIN”brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highxn--iclud-8ta.comscore 42echoes icloud
punycode name “iclôud scripts=LATIN”brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highxn--ild-2la0e4a.comscore 42echoes icloud
punycode name “içlôùd scripts=LATIN”brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highxn--ild-2la0e4b.comscore 42echoes icloud
punycode name “içlôüd scripts=LATIN”brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highxn--ild-2la0eyb.comscore 42echoes icloud
punycode name “içlôûd scripts=LATIN”brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highxn--ild-2la0f4a.comscore 42echoes icloud
punycode name “içlöûd scripts=LATIN”brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highxn--ild-2la0frb.comscore 42echoes icloud
punycode name “içlöüd scripts=LATIN”brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highxn--ild-2la0fsa.comscore 42echoes icloud
punycode name “içlöùd scripts=LATIN”brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highxn--ilod-0oa2k.comscore 42echoes icloud
punycode name “içloüd scripts=LATIN”brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highxn--ilod-0oa4i.comscore 42echoes icloud
punycode name “içloùd scripts=LATIN”brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highxn--ilod-0oa6j.comscore 42echoes icloud
punycode name “içloûd scripts=LATIN”brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highxn--iloud-yra.comscore 42echoes icloud
punycode name “içloud scripts=LATIN”brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highxn--ilud-0oa3f.comscore 42echoes icloud
punycode name “içlôud scripts=LATIN”brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highxn--ilud-0oa5g.comscore 42echoes icloud
punycode name “içlöud scripts=LATIN”brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highxxai.latscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “disney”
Highzelo-finance.comscore 42echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highaccountss.xyzscore 40· blocked the probe
lure words (login, verify, secure…) “account,accounts”TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Highaicloudhop.infoscore 40echoes icloud· boilerplate page
brand in the name “icloud”brand name at a retail registrar “Unstoppable Domains Inc”identical page on many newborns “54 identical pages”brand name redirects elsewhere “unstoppable.ai”
Highcampusrevolution.orgscore 40echoes revolut· blocked the probe
brand in the name “revolut”brand name at a retail registrar “GoDaddy.com, LLC”form on a brand-styled page “has_form”
Highfloridagreasetrapcleaningservice.comscore 40· registrar placeholder
lure words (login, verify, secure…) “service”very long name “32”brand in page title, not in the name “hostinger”identical page on many newborns “23 identical pages”
Highgetbigcoin.xyzscore 40· active website
TLD with a high abuse rate “xyz”page sells counterfeit pharma “No prescription required”brand in page title, not in the name “robinhood”
Highrepairogmailbox.sitescore 40echoes gmail· blocked the probe
brand in the name “gmail”brand name at a retail registrar “GoDaddy.com, LLC”form on a brand-styled page “has_form”
Highwordpressdevelopers.capetownscore 40echoes wordpress· boilerplate page
brand in the name “wordpress”identical page on many newborns “1534 identical pages”
Mediumshopee.runscore 39echoes shopee· active website
brand in the name “shopee”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand name and brand-styled page “shopee”
Medium145235856.orgscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Medium1ratuular77.xyzscore 38· active website
TLD with a high abuse rate “xyz”page asks for credentials “Login to your Account”
Medium2e38a3f4-2112-4fad-a435-523949383e25.clickscore 38· active website
many hyphens “4”very long name “36”TLD with a high abuse rate “click”brand in page title, not in the name “wordpress”
Medium31slotintv.livescore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Medium321.taxiscore 38· redirects elsewhere
brand in page title, not in the name “booking”form on a brand-styled page “has_form”
Medium32slotintv.livescore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Medium33slotintv.livescore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Medium34slotintv.livescore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Medium35slotintv.livescore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Medium37slotintv.livescore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Medium38slotintv.livescore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Medium39slotintv.livescore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Medium40slotintv.livescore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumaaplrwa.techscore 38· active website
brand in page title, not in the name “apple”form on a brand-styled page “has_form”
Mediumacheteraccept.infoscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumacqueserene.infoscore 38· redirects elsewhere
brand in page title, not in the name “airbnb”form on a brand-styled page “has_form”
Mediumaddyexpress.shopscore 38· redirects elsewhere
brand in page title, not in the name “usps”form on a brand-styled page “has_form”
Mediumadsgoogle.storescore 38echoes google· no DNS
brand in the name “google”brand name at a retail registrar “eNom, LLC”
Mediumadverioagency.infoscore 38· redirects elsewhere
brand in page title, not in the name “amazon”form on a brand-styled page “has_form”
Mediumadverioboost.infoscore 38· redirects elsewhere
brand in page title, not in the name “amazon”form on a brand-styled page “has_form”
Mediumadveriobrands.infoscore 38· redirects elsewhere
brand in page title, not in the name “amazon”form on a brand-styled page “has_form”
Mediumadveriochannels.infoscore 38· redirects elsewhere
brand in page title, not in the name “amazon”form on a brand-styled page “has_form”

Same data as JSON: /api/zone/risk?day=2026-09-04&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.