Flagged newborn domains, Sunday, September 6, 2026

282 names at tier medium or above in .top, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

High17roblox.topscore 55echoes roblox· empty page
brand in the namerobloxbrand plus digits17robloxTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com+1 more

Model opinion: looks like abuse (target: Roblox), confidence 82%. An opinion, not a finding.

Highfedexexpress.topscore 55echoes fedex· redirects elsewhere
brand in the namefedexTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand in page title, not in the nameapple+2 more

Model opinion: looks like abuse (target: FedEx), confidence 78%. An opinion, not a finding.

Highn4v3ro48.topscore 55echoes naver· not probed yet
brand spelled with digitsn4v3ro48→naverbrand plus digitsn4v3ro48TLD with a high abuse ratetopbrand name at a retail registrarDominet (HK) Limited
Highao0-icloud.topscore 54echoes icloud· no web server
brand in the nameicloudbrand plus digitsao0-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com
Highao1-icloud.topscore 54echoes icloud· no web server
brand in the nameicloudbrand plus digitsao1-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com
Highao2-icloud.topscore 54echoes icloud· no web server
brand in the nameicloudbrand plus digitsao2-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com
Highao3-icloud.topscore 54echoes icloud· no web server
brand in the nameicloudbrand plus digitsao3-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com
Highao4-icloud.topscore 54echoes icloud· no web server
brand in the nameicloudbrand plus digitsao4-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com
Highao5-icloud.topscore 54echoes icloud· no web server
brand in the nameicloudbrand plus digitsao5-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com
Highao6-icloud.topscore 54echoes icloud· no web server
brand in the nameicloudbrand plus digitsao6-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com
Highao7-icloud.topscore 54echoes icloud· no web server
brand in the nameicloudbrand plus digitsao7-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com
Highao8-icloud.topscore 54echoes icloud· no web server
brand in the nameicloudbrand plus digitsao8-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com
Highao9-icloud.topscore 54echoes icloud· no web server
brand in the nameicloudbrand plus digitsao9-icloudTLD with a high abuse ratetopfree DNS providerdnsowl.com
Highbosicloud.topscore 54echoes icloud· empty page
brand in the nameicloudTLD with a high abuse ratetopbrand name at a retail registrar烟台帝思普网络科技有限公司brand name redirects elsewherebaidu.com

Model opinion: looks benign, confidence 78%. An opinion, not a finding.

Highmg-cloud.topscore 54echoes icloud· boilerplate page
one-letter brand typocloud≈icloudTLD with a high abuse ratetopbrand name at a retail registrar成都西维数码科技有限公司identical page on many newborns85 identical pages

Model opinion: suspicious (target: Apple (iCloud)), confidence 72%. An opinion, not a finding.

Highilabservice.topscore 52· active website
lure words (login, verify, secure…)serviceTLD with a high abuse ratetopbrand in page title, not in the nameappleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highwohnungsanfrage-formular-a49b90b5f15ce514473.topscore 50· redirects elsewhere
very long name44TLD with a high abuse ratetopbrand in page title, not in the nameebayform on a brand-styled pagehas_form

Model opinion: looks like phishing (target: Kleinanzeigen (eBay Kleinanzeigen)), confidence 75%. An opinion, not a finding.

Higharentlive.topscore 46· blocked the probe
TLD with a high abuse ratetopbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highbstparc.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highcasinorosario.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highcopenhagencasino.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highdromse.topscore 46· blocked the probe
TLD with a high abuse ratetopbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highfirstcasino.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highikimislinets.topscore 46· blocked the probe
TLD with a high abuse ratetopbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highinfinici.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highlivevilage.topscore 46· blocked the probe
TLD with a high abuse ratetopbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highresdeop.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namequickbooksform on a brand-styled pagehas_form
Highrikisaka.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highslackresendmms.topscore 46echoes slack· no DNS
brand in the nameslackTLD with a high abuse ratetopfree DNS providerdnsowl.com
Highslacksmsmne.topscore 46echoes slack· no DNS
brand in the nameslackTLD with a high abuse ratetopfree DNS providerdnsowl.com
Highsssshop.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the nameshopeeform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Highsy6.topscore 46· active website
TLD with a high abuse ratetopbrand in page title, not in the namesteamform on a brand-styled pagehas_form

Model opinion: looks like abuse (target: Steam), confidence 78%. An opinion, not a finding.

Hightrback.topscore 46· blocked the probe
TLD with a high abuse ratetopbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highvisual-highlk.topscore 46· redirects elsewhere
TLD with a high abuse ratetopbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highxn--cers13agybt52a.topscore 46· server error
punycode name懒猫影剧 scripts=CJKTLD with a high abuse ratetopbrand in page title, not in the namecloudflare

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highamericanexpresspoints.topscore 44echoes americanexpress· empty page
brand in the nameamericanexpressTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com

Model opinion: looks like abuse (target: American Express), confidence 72%. An opinion, not a finding.

Highatoserviceupdate.topscore 40· blocked the probe
lure words (login, verify, secure…)service,updateTLD with a high abuse ratetopbrand in page title, not in the namecloudflare
Mediumcrab-mailer.topscore 38· active website
TLD with a high abuse ratetoppage asks for credentialsLogin to your account
Mediumpornocomlegenda.topscore 38· registrar placeholder
TLD with a high abuse ratetopbrand in page title, not in the namehostingeridentical page on many newborns68 identical pages
Mediumchong-cloud.topscore 36echoes icloud· no DNS
one-letter brand typocloud≈icloudTLD with a high abuse ratetop
punycode name全球醫學影像工作站 scripts=CJKvery long name33random-looking nameH=3.90TLD with a high abuse ratetop
punycode name全球医学影像工作站 scripts=CJKvery long name31random-looking nameH=4.17TLD with a high abuse ratetop
Mediumdnsmint-108bd2.topscore 33· no DNS
TLD with a high abuse ratetopnameserver domain born the same daymintns.com
Mediumxn--3bs381cxk0acfe.topscore 31· boilerplate page
punycode name金沙集团 scripts=CJKrandom-looking nameH=3.62TLD with a high abuse ratetop
Mediumxn--79q51cs58b842a.topscore 31· no DNS
punycode name出海账号 scripts=CJKrandom-looking nameH=3.75TLD with a high abuse ratetop
Mediumxn--79qz38dstrw5f.topscore 31· no DNS
punycode name出海賬號 scripts=CJKrandom-looking nameH=3.91TLD with a high abuse ratetop
Mediumxn--9csx6r1s3bm8h.topscore 31· no DNS
punycode name必贏國際 scripts=CJKrandom-looking nameH=3.64TLD with a high abuse ratetop
Mediumxn--j7qz4al6cyv5aqnp.topscore 31· no DNS
punycode name疆勤农商标 scripts=CJKrandom-looking nameH=3.84TLD with a high abuse ratetop
Mediumxn--kcrp1j2zwmo2b.topscore 31· boilerplate page
punycode name永利国际 scripts=CJKrandom-looking nameH=3.77TLD with a high abuse ratetop
Mediumxn--kgwz89d3pe6vp.topscore 31· no DNS
punycode name調配點檢 scripts=CJKrandom-looking nameH=3.77TLD with a high abuse ratetop

Same data as JSON: /api/zone/risk?day=2026-09-06&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.