Flagged newborn domains, Friday, September 4, 2026

191 names at tier low or above in .click, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalshopeesale.clickscore 79echoes shopee· active website
brand in the nameshopeeTLD with a high abuse rateclickbrand name at a retail registrarMAT BAO CORPORATIONbrand name and brand-styled pageshopee+1 more

Model opinion: looks like abuse (target: Shopee), confidence 58%. An opinion, not a finding.

Hightime-strike.clickscore 56echoes stripe· active website
one-letter brand typostrike≈stripeTLD with a high abuse rateclickbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot, LLC+1 more

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highcloudflarewallet.clickscore 55echoes cloudflare· server error
brand in the namecloudflarelure words (login, verify, secure…)walletTLD with a high abuse rateclickbrand name behind Cloudflarecloudflare.com+1 more

Model opinion: looks like abuse (target: Cloudflare), confidence 72%. An opinion, not a finding.

Highconsultvanguard.clickscore 52echoes vanguard· blocked the probe
brand in the namevanguardTLD with a high abuse rateclickbrand name at a retail registrarDynadot, LLCbrand name at a watch-list registrarDynadot, LLC
Highvanguardaigroup.clickscore 52echoes vanguard· blocked the probe
brand in the namevanguardTLD with a high abuse rateclickbrand name at a retail registrarDynadot, LLCbrand name at a watch-list registrarDynadot, LLC
Highwwwsecure-ally.clickscore 52· blocked the probe
lure words (login, verify, secure…)secureTLD with a high abuse rateclickbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highkfoo.clickscore 50· active website
TLD with a high abuse rateclickpage impersonates a brandBinancebrand in page title, not in the namebinance

Model opinion: suspicious (target: Binance), confidence 72%. An opinion, not a finding.

High920197.clickscore 46· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highbrevixaxop.clickscore 46· active website
TLD with a high abuse rateclickbrand in page title, not in the namebookingform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highdoordiarypie.clickscore 46· active website
TLD with a high abuse rateclickbrand in page title, not in the namebookingform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highgoodtiesvs.clickscore 46· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highid4826.clickscore 46· redirects elsewhere
TLD with a high abuse rateclickbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highkatayu.clickscore 46· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highmx4j8.clickscore 46· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highpointvelvetform.clickscore 46· active website
TLD with a high abuse rateclickbrand in page title, not in the namebookingform on a brand-styled pagehas_form

Model opinion: unreachable when judged, confidence 95%. An opinion, not a finding.

Highreservation-info2026.clickscore 46· redirects elsewhere
TLD with a high abuse rateclickbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious (target: Google), confidence 72%. An opinion, not a finding.

Hightg-forum.clickscore 46· redirects elsewhere
TLD with a high abuse rateclickbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Hightomothy.clickscore 46· active website
TLD with a high abuse rateclickbrand in page title, not in the namesalesforceform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highyidiwu.clickscore 46· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highyoutubetomp3.clickscore 46· redirects elsewhere
TLD with a high abuse rateclickbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highziquantoxop.clickscore 46· active website
TLD with a high abuse rateclickbrand in page title, not in the namebookingform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highinfo-finance.clickscore 44echoes binance· boilerplate page
one-letter brand typofinance≈binanceTLD with a high abuse rateclickbrand name at a retail registrarName.com, Inc.

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Medium2e38a3f4-2112-4fad-a435-523949383e25.clickscore 38· active website
many hyphens4very long name36TLD with a high abuse rateclickbrand in page title, not in the namewordpress
Mediumbeaconwealthsmgt.clickscore 38· active website
TLD with a high abuse rateclickpage asks for credentialsverify your account
Mediumfalconaura.clickscore 38· active website
TLD with a high abuse rateclickpage asks for credentialsverify your account
Mediumprowavesignalsvest.clickscore 38· active website
TLD with a high abuse rateclickpage asks for credentialsverify your account
Mediumsequoiaflooring.clickscore 36· blocked the probe
TLD with a high abuse rateclickfree DNS providerdnsowl.combrand in page title, not in the namecloudflare
Mediumtavexa-bonusgold.clickscore 34· blocked the probe
lure words (login, verify, secure…)bonusTLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumvelvex-bonusfortune.clickscore 34· blocked the probe
lure words (login, verify, secure…)bonusTLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumxaviron-goldenprize.clickscore 34· blocked the probe
lure words (login, verify, secure…)prizeTLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumzelvaron-bonusvault.clickscore 34· blocked the probe
lure words (login, verify, secure…)bonusTLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumzelvaron-cashreward.clickscore 34· blocked the probe
lure words (login, verify, secure…)rewardTLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumgors.clickscore 30· active website
TLD with a high abuse rateclickpage impersonates a brandMetaMask
Mediumluckybolt.clickscore 30· active website
TLD with a high abuse rateclickpage impersonates a brandUSPS
Mediummegawinova.clickscore 30· active website
TLD with a high abuse rateclickpage impersonates a brandUSPS
Mediummesanode.clickscore 30· active website
TLD with a high abuse rateclickpage impersonates a brandMetaMask
Mediumnightfuryx.clickscore 30· active website
TLD with a high abuse rateclickpage impersonates a brandNetflix
Mediumspaceluck.clickscore 30· active website
TLD with a high abuse rateclickpage impersonates a brandUSPS
Medium36taman777.clickscore 28· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Medium37taman777.clickscore 28· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumalgoinnovate.clickscore 28· active website
TLD with a high abuse rateclickbrand in page title, not in the namenationwide
Mediumallweldmf.clickscore 28· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumavorix-cashboost.clickscore 28· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumavorix-cashglow.clickscore 28· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumavorix-goldenjackpot.clickscore 28· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumavorix-luckyvault.clickscore 28· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumaz104leek.clickscore 28· empty page
TLD with a high abuse rateclickbrand in page title, not in the namemicrosoft
Mediumbrothersfab.clickscore 28· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflare
Mediumbuckthebunny.clickscore 28· placeholder page
TLD with a high abuse rateclickbrand in page title, not in the namerobinhood
Mediumcavoren-cashspark.clickscore 28· blocked the probe
TLD with a high abuse rateclickbrand in page title, not in the namecloudflare

Same data as JSON: /api/zone/risk?day=2026-09-04&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.