Flagged newborn domains, Sunday, September 6, 2026

2,381 names at tier low or above in .com, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticaltiktoksignal.comscore 69echoes tiktok· active website
brand in the nametiktokbrand name behind Cloudflarecloudflare.combrand name and brand-styled pagetiktokform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Criticalsplicebay.comscore 62echoes ebay· active website
brand in the nameebaybrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.form on a brand-styled pagehas_form

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Highacheeiindiqueishopee.comscore 58echoes shopee· active website
brand in the nameshopeebrand name at a retail registrarPDR Ltd. d/b/a PublicDomainRegistry.combrand in page title, not in the namewordpress

Model opinion: suspicious (target: Shopee), confidence 60%. An opinion, not a finding.

High182940-ledger.comscore 55echoes ledger
brand in the nameledgerbrand plus digits182940-ledgerbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITED+1 more

Model opinion: suspicious (target: Ledger), confidence 72%. An opinion, not a finding.

High2factor-trustwallets.comscore 55echoes trustwallet
brand in the nametrustwalletlure words (login, verify, secure…)walletbrand plus digits2factor-trustwalletsbrand name at a retail registrarTucows Domains Inc.

Model opinion: suspicious (target: Trust Wallet), confidence 72%. An opinion, not a finding.

High3481921-coinbase.comscore 55echoes coinbase· blocked the probe
brand in the namecoinbasebrand plus digits3481921-coinbaserandom-looking nameH=3.77brand name behind Cloudflarecloudflare.com+2 more
High678113-coinbase.comscore 55echoes coinbase
brand in the namecoinbasebrand plus digits678113-coinbaserandom-looking nameH=3.66brand name behind Cloudflarecloudflare.com+2 more
High937853coinbase.comscore 55echoes coinbase
brand in the namecoinbasebrand plus digits937853coinbaserandom-looking nameH=3.66brand name behind Cloudflarecloudflare.com+1 more
High987665coinbase.comscore 55echoes coinbase· robots.txt denied
brand in the namecoinbasebrand plus digits987665coinbaserandom-looking nameH=3.66brand name behind Cloudflarecloudflare.com+2 more
Highaccountholderverificationscotiabank.comscore 55echoes scotiabank
brand in the namescotiabanklure words (login, verify, secure…)account,verificationvery long name35
Highace-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 60%. An opinion, not a finding.

Highadobefreight.comscore 55echoes adobe· blocked the probe
brand in the nameadobebrand name and brand-styled pageadobeform on a brand-styled pagehas_form
Highaid-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 60%. An opinion, not a finding.

Highamp-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 62%. An opinion, not a finding.

Highban-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highbat-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: suspicious (target: WhatsApp), confidence 60%. An opinion, not a finding.

Highbee-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highcaptcha-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 63%. An opinion, not a finding.

Highchatgptcyberverification.comscore 55echoes chatgpt
brand in the namechatgptlure words (login, verify, secure…)verification
Highcheck-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappbrand name at a retail registrarGuizhou Zhongyu Zhike Network Technologyform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highcluster-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 60%. An opinion, not a finding.

Highcoinbaseaccounts.comscore 55echoes coinbase· no DNS
brand in the namecoinbaselure words (login, verify, secure…)account,accountsbrand name at a retail registrareNom, LLC
Highconfirm-whatsapp.comscore 55echoes whatsapp
brand in the namewhatsapplure words (login, verify, secure…)confirm
Highconnector-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highconsul-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: suspicious (target: WhatsApp), confidence 60%. An opinion, not a finding.

Highcpl-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappbrand name at a retail registrarGuizhou Zhongyu Zhike Network Technologyform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 62%. An opinion, not a finding.

Highdie-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highdig-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 60%. An opinion, not a finding.

Highdim-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 62%. An opinion, not a finding.

Highdns-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 62%. An opinion, not a finding.

Highegg-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 62%. An opinion, not a finding.

Highenterprise-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappbrand name at a retail registrarGuizhou Zhongyu Zhike Network Technologyform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 60%. An opinion, not a finding.

Highevri-delivery-fees.comscore 55echoes evri
brand in the nameevrilure words (login, verify, secure…)deliverybrand name behind Cloudflarecloudflare.com
Highfan-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 60%. An opinion, not a finding.

Highfastly-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 72%. An opinion, not a finding.

Highfax-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highfly-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 60%. An opinion, not a finding.

Highfoe-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappbrand name at a retail registrarGuizhou Zhongyu Zhike Network Technologyform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 60%. An opinion, not a finding.

Highgetraenkeservice-bayreuth.comscore 55echoes ebay· registrar placeholder
brand in the nameebaylure words (login, verify, secure…)serviceform on a brand-styled pagehas_formidentical page on many newborns102 identical pages

Model opinion: looks benign, confidence 96%. An opinion, not a finding.

Highgmail-secure.comscore 55echoes gmail
brand in the namegmaillure words (login, verify, secure…)securebrand name behind Cloudflarecloudflare.com
Highgoogleadswords-supports.comscore 55echoes google
brand in the namegooglelure words (login, verify, secure…)support
Highicloud-review-id54036e42.comscore 55echoes icloud
brand in the nameicloudbrand plus digitsicloud-review-id54036e42brand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo, LLC+1 more
Highjwt-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: suspicious (target: WhatsApp), confidence 60%. An opinion, not a finding.

Highk8s-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappbrand plus digitsk8s-whatsappform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: suspicious (target: WhatsApp), confidence 60%. An opinion, not a finding.

Highlewistrustwallet.comscore 55echoes trustwallet
brand in the nametrustwalletlure words (login, verify, secure…)wallet
Highlogin-cashapp.comscore 55echoes cashapp
brand in the namecashapplure words (login, verify, secure…)login
Highlogin-web-whatsapp.comscore 55echoes whatsapp
brand in the namewhatsapplure words (login, verify, secure…)login
Highloginportal-google.comscore 55echoes google
brand in the namegooglelure words (login, verify, secure…)login,portalbrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITEDbrand name at a watch-list registrarNICENIC INTERNATIONAL GROUP CO., LIMITED
Highmano-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the namewhatsappbrand name at a retail registrarGuizhou Zhongyu Zhike Network Technologyform on a brand-styled pagehas_formbrand name redirects elsewhereyahoo.com

Model opinion: looks like abuse (target: WhatsApp), confidence 58%. An opinion, not a finding.

Highmercadolibre-ai.comscore 55echoes mercadolibre· blocked the probe
brand in the namemercadolibrebrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc+2 more

Same data as JSON: /api/zone/risk?day=2026-09-06&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.