Flagged newborn domains, Saturday, September 5, 2026

8 names at tier high or above in .site, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalingresseroblox.sitescore 71echoes roblox· active website
brand in the namerobloxbrand name at a retail registrarName.com, Inc.brand name and brand-styled pagerobloxform on a brand-styled pagehas_form

Model opinion: looks like phishing (target: Ingresse (Brazilian ticketing platform) / Roblox), confidence 90%. An opinion, not a finding.

Criticalpagamentos-mercadopago.sitescore 62echoes mercadopago· active website
brand in the namemercadopagobrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UABform on a brand-styled pagehas_form

Model opinion: looks like phishing (target: Mercado Pago), confidence 93%. An opinion, not a finding.

Highbankofamericaonly.sitescore 55echoes bankofamerica· blocked the probe
brand in the namebankofamericabrand name at a retail registrarGoDaddy.com, LLCform on a brand-styled pagehas_form

Model opinion: looks like phishing (target: Bank of America), confidence 82%. An opinion, not a finding.

Highjagged-peak-cloud-5b2d8e.sitescore 55echoes icloud· blocked the probe
one-letter brand typocloud≈icloudmany hyphens3brand plus digitsjagged-peak-cloud-5b2d8ebrand name behind Cloudflarecloudflare.com+2 more

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highquickbooksintuit.sitescore 54echoes intuit· registrar placeholder
brand in the nameintuitbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.identical page on many newborns5137 identical pages

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highmobile-gopay777.sitescore 50echoes tmobile· parked, for sale
one-letter brand typomobile≈tmobilebrand plus digitsmobile-gopay777brand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.

Model opinion: looks like abuse, confidence 82%. An opinion, not a finding.

Highstatusbroker-finance.sitescore 46echoes binance· boilerplate page
one-letter brand typofinance≈binancebrand name at a retail registrarPDR Ltd. d/b/a PublicDomainRegistry.comidentical page on many newborns22 identical pages

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Hightelegrammatka.sitescore 44echoes telegram· robots.txt denied
brand in the nametelegrambrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB

Same data as JSON: /api/zone/risk?day=2026-09-05&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.