Flagged newborn domains, Sunday, September 6, 2026

90 names at tier medium or above in .online, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticaldocusigner.onlinescore 100echoes docusign· active website
brand in the namedocusignpage asks for credentialsSign in to your accountbrand name and brand-styled pagedocusignform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticalchatgptbd.onlinescore 68echoes chatgpt· active website
brand in the namechatgptbrand in page title, not in the nameopenaiform on a brand-styled pagehas_form

Model opinion: looks like phishing (target: OpenAI), confidence 93%. An opinion, not a finding.

Criticalrobloxcheaty.onlinescore 65echoes roblox· active website
brand in the namerobloxbrand name on a rarely-seen nameservermydevil.netbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.+1 more

Model opinion: looks like abuse (target: Roblox), confidence 78%. An opinion, not a finding.

Criticaldocomiru.onlinescore 60· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflixform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Criticalstrongtv.onlinescore 60· active website
page impersonates a brandAmazon Primebrand in page title, not in the nameappleform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 93%. An opinion, not a finding.

Criticalyespron.onlinescore 60· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflixform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 55%. An opinion, not a finding.

Highroblox20thanniversary.onlinescore 59echoes roblox· active website
brand in the namerobloxbrand plus digitsroblox20thanniversarybrand name behind Cloudflarecloudflare.combrand name and brand-styled pageroblox

Model opinion: suspicious (target: Roblox), confidence 62%. An opinion, not a finding.

Highvanguard-casino.onlinescore 59echoes vanguard· active website
brand in the namevanguardbrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Incbrand name and brand-styled pagevanguard

Model opinion: looks like abuse, confidence 70%. An opinion, not a finding.

Highbank0famerica.onlinescore 55echoes bankofamerica· no DNS
brand spelled with digitsbank0famerica→bankofamericabrand plus digitsbank0famericabrand name on a rarely-seen nameserverbb-online.bizbrand name at a retail registrarBB-Online UK Limited
Highgg88tiktok.onlinescore 55echoes tiktok· blocked the probe
brand in the nametiktokbrand plus digitsgg88tiktokbrand name behind Cloudflarecloudflare.combrand in page title, not in the namecloudflare
Highschwabonline.onlinescore 54echoes schwab· registrar placeholder
brand in the nameschwabbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.identical page on many newborns4129 identical pages

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highpayval.onlinescore 52echoes paypal· registrar placeholder
one-letter brand typopayval≈paypalbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.identical page on many newborns4129 identical pages

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highstarlinkexpress.onlinescore 50echoes starlink· other
brand in the namestarlinkbrand in page title, not in the namecloudflare

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highappbradesco-atualiza.onlinescore 48echoes bradesco· blocked the probe
brand in the namebradescobrand name behind Cloudflarecloudflare.combrand name at a retail registrarGoDaddy.com, LLCbrand in page title, not in the namecloudflare
Highcostcontroldoesnotmeansacrificingquality.onlinescore 48echoes costco· robots.txt denied
brand in the namecostcovery long name40brand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highxn--pagamentocriao-2hb7d.onlinescore 48· registrar placeholder
punycode namepagamentocriação scripts=LATINbrand in page title, not in the namehostingeridentical page on many newborns68 identical pages

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highgta6xbox.onlinescore 46echoes xbox· no web server
brand in the namexboxbrand plus digitsgta6xboxbrand name at a retail registrarGoDaddy.com, LLC
Highhealth-secure.onlinescore 44· blocked the probe
lure words (login, verify, secure…)securebrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highoutservice.onlinescore 44· redirects elsewhere
lure words (login, verify, secure…)servicebrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highslackmessage.onlinescore 44echoes slack· no DNS
brand in the nameslackbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highvem-conversar-comigo-hoje.onlinescore 44· redirects elsewhere
many hyphens3brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Highlightwebwork.onlinescore 42· active website
page impersonates a brandDHLbrand in page title, not in the nametelegram
Highmobile-price.onlinescore 42echoes tmobile· robots.txt denied
one-letter brand typomobile≈tmobilebrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highthegentlementvseries.onlinescore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix
Hightron-card.onlinescore 42· active website
page impersonates a brandMetaMaskbrand in page title, not in the nameapple
Highdichvugoogleadsense.onlinescore 40echoes google· blocked the probe
brand in the namegooglebrand name at a retail registrarGoDaddy.com, LLCform on a brand-styled pagehas_form
Mediumakacheva.onlinescore 38· active website
brand in page title, not in the namechatgptform on a brand-styled pagehas_form
Mediumalkosto-premios.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumammaryasir.onlinescore 38· active website
brand in page title, not in the nameshopifyform on a brand-styled pagehas_form
Mediumaskyourpeople.onlinescore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumbharattechsolution.onlinescore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumcatalogrescue.onlinescore 38· active website
brand in page title, not in the nameshopifyform on a brand-styled pagehas_form
Mediumcharanverse.onlinescore 38· active website
brand in page title, not in the namelinkedinform on a brand-styled pagehas_form
Mediumchillaxresortbangkokg.onlinescore 38· active website
brand in page title, not in the namebookingform on a brand-styled pagehas_form
Mediumdeltacane.onlinescore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumdspresencadigital.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumformulariovaga.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumgchatmigrator.onlinescore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumgoogleworkplacepromocode.onlinescore 38echoes google· empty page
brand in the namegooglebrand name at a retail registrarNetwork Solutions, LLC
Mediumhimalayanwings.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumhyperxmae.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumid1905730.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumigramworld.onlinescore 38· active website
brand in page title, not in the nameinstagramform on a brand-styled pagehas_form
Mediumimpactacademiesro.onlinescore 38· active website
brand in page title, not in the namerobloxform on a brand-styled pagehas_form
Mediuminterfreetv.onlinescore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumintuitiveinnovationwithgeri.onlinescore 38echoes intuit· robots.txt denied
brand in the nameintuitbrand name at a retail registrarNetwork Solutions, LLC
Mediumkarlmichel.onlinescore 38· server error
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumlanternspanail.onlinescore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumlittleloop.onlinescore 38· active website
brand in page title, not in the nameshopifyform on a brand-styled pagehas_form
Mediumlucasautomacoes.onlinescore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form

Same data as JSON: /api/zone/risk?day=2026-09-06&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.