Flagged newborn domains, Friday, September 4, 2026

57 names at tier high or above in .top, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalclientes.topscore 68· active website
TLD with a high abuse ratetoppage impersonates a brandFedExbrand in page title, not in the namefedexform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Criticalamazonbot.topscore 64echoes amazon· active website
brand in the nameamazonTLD with a high abuse ratetopbrand name at a retail registrar阿里云计算有限公司form on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 82%. An opinion, not a finding.

Criticalkebaya4dsunday.topscore 62echoes ebay· active website
brand in the nameebaybrand plus digitskebaya4dsundayTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com+2 more

Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.

Highcloud-shelter.topscore 56echoes icloud· active website
one-letter brand typocloud≈icloudTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo,LLC+1 more

Model opinion: looks benign, confidence 89%. An opinion, not a finding.

Higha1-icloud.topscore 55echoes icloud· no web server
brand in the nameicloudbrand plus digitsa1-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highapp1e-af.topscore 55echoes apple· empty page
brand spelled with digitsapp1e-af→applebrand plus digitsapp1e-afTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com+2 more

Model opinion: looks like abuse (target: Apple), confidence 76%. An opinion, not a finding.

Highapp1e-jq.topscore 55echoes apple· no DNS
brand spelled with digitsapp1e-jq→applebrand plus digitsapp1e-jqTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com+2 more
Highapple-icb0.topscore 55echoes apple· no DNS
brand in the nameapplebrand plus digitsapple-icb0TLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highapple-icb1.topscore 55echoes apple· no DNS
brand in the nameapplebrand plus digitsapple-icb1TLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highapple-icb2.topscore 55echoes apple· no DNS
brand in the nameapplebrand plus digitsapple-icb2TLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highapple-ick0.topscore 55echoes apple· no DNS
brand in the nameapplebrand plus digitsapple-ick0TLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highapple-ick1.topscore 55echoes apple· no DNS
brand in the nameapplebrand plus digitsapple-ick1TLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highapple-ick2.topscore 55echoes apple· no DNS
brand in the nameapplebrand plus digitsapple-ick2TLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highapple-ick3.topscore 55echoes apple· no DNS
brand in the nameapplebrand plus digitsapple-ick3TLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highapple-ick4.topscore 55echoes apple· no DNS
brand in the nameapplebrand plus digitsapple-ick4TLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highapple-ick5.topscore 55echoes apple· no DNS
brand in the nameapplebrand plus digitsapple-ick5TLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highapple-ick6.topscore 55echoes apple· no DNS
brand in the nameapplebrand plus digitsapple-ick6TLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highapple-ick7.topscore 55echoes apple· no DNS
brand in the nameapplebrand plus digitsapple-ick7TLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highapple-ick8.topscore 55echoes apple· no DNS
brand in the nameapplebrand plus digitsapple-ick8TLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highapple-ick9.topscore 55echoes apple· no web server
brand in the nameapplebrand plus digitsapple-ick9TLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highbbbybit.topscore 55echoes bybit· empty page
brand in the namebybitTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGname.com Pte. Ltd.+1 more

Model opinion: looks like phishing (target: Bybit), confidence 75%. An opinion, not a finding.

Highclooudflare.topscore 55echoes cloudflare· empty page
one-letter brand typoclooudflare≈cloudflareTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo,LLC+1 more

Model opinion: looks like abuse (target: Cloudflare), confidence 83%. An opinion, not a finding.

Highdocusign-document-review.topscore 55echoes docusign· redirects elsewhere
brand in the namedocusignTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo,LLC+3 more

Model opinion: looks like abuse (target: DocuSign), confidence 78%. An opinion, not a finding.

Highe3-icloud.topscore 55echoes icloud· no web server
brand in the nameicloudbrand plus digitse3-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highephsbgoogle.topscore 55echoes google· empty page
brand in the namegoogleTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo,LLC+1 more

Model opinion: looks like abuse (target: Google), confidence 62%. An opinion, not a finding.

Highi8-icloud.topscore 55echoes icloud· no web server
brand in the nameicloudbrand plus digitsi8-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Higho9-icloud.topscore 55echoes icloud· no web server
brand in the nameicloudbrand plus digitso9-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highq1-icloud.topscore 55echoes icloud· no web server
brand in the nameicloudbrand plus digitsq1-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highr4-icloud.topscore 55echoes icloud· no web server
brand in the nameicloudbrand plus digitsr4-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Hight5-icloud.topscore 55echoes icloud· no web server
brand in the nameicloudbrand plus digitst5-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Hightiktok2027.topscore 55echoes tiktok· empty page
brand in the nametiktokbrand plus digitstiktok2027TLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com+2 more

Model opinion: looks like abuse (target: TikTok), confidence 60%. An opinion, not a finding.

Highu7-icloud.topscore 55echoes icloud· no web server
brand in the nameicloudbrand plus digitsu7-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highw2-icloud.topscore 55echoes icloud· no web server
brand in the nameicloudbrand plus digitsw2-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Highwechat5.topscore 55echoes wechat· boilerplate page
brand in the namewechatbrand plus digitswechat5TLD with a high abuse ratetopbrand name at a retail registrar成都西维数码科技有限公司+1 more

Model opinion: looks like abuse (target: WeChat), confidence 63%. An opinion, not a finding.

Highwordpressca.topscore 55echoes wordpress· no web server
brand in the namewordpressTLD with a high abuse ratetopfree DNS providerdnsowl.combrand name at a retail registrarNameSilo,LLC+1 more
Highy6-icloud.topscore 55echoes icloud· no web server
brand in the nameicloudbrand plus digitsy6-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com+2 more
Hightiktokslot88aa.topscore 54echoes tiktok· no web server
brand in the nametiktokbrand plus digitstiktokslot88aaTLD with a high abuse ratetopbrand name at a retail registrarPDR Ltd.
Hightiktokx.topscore 52echoes tiktok· no DNS
brand in the nametiktokTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrar北京新网数码信息技术有限公司
Highp-cloud.topscore 50echoes icloud· no DNS
one-letter brand typocloud≈icloudTLD with a high abuse ratetopbrand name at a retail registrarNameSilo,LLCbrand name at a watch-list registrarNameSilo,LLC
Highrtpstarlink4dcuan.topscore 50echoes starlink· active website
brand in the namestarlinkbrand plus digitsrtpstarlink4dcuanTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com+2 more

Model opinion: looks like abuse, confidence 88%. An opinion, not a finding.

Highrtpstarlink4dgas.topscore 50echoes starlink· active website
brand in the namestarlinkbrand plus digitsrtpstarlink4dgasTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com+2 more

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Highrtpstarlink4dno1.topscore 50echoes starlink· active website
brand in the namestarlinkbrand plus digitsrtpstarlink4dno1TLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com+2 more

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

High1xslots-ce.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highchatgptopenai.topscore 46echoes openai· no DNS
brand in the nameopenaiTLD with a high abuse ratetopbrand name at a retail registrar成都西维数码科技有限公司
Highfacebookdate.topscore 46echoes facebook· no DNS
brand in the namefacebookTLD with a high abuse ratetopbrand name at a retail registrarJuly Name Limited
Highmagnetsy.topscore 46echoes etsy· no DNS
brand in the nameetsyTLD with a high abuse ratetopbrand name at a retail registrar阿里云计算有限公司
Highmediastack.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highmynameserver-checker.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious (target: Google), confidence 72%. An opinion, not a finding.

Highpornoorelincest.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highrushomeporn.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-09-04&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.