Flagged newborn domains, Tuesday, September 8, 2026

6 names at tier critical or above in .com, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalbdtopsmm.comscore 68· active website
page asks for credentialsSign in to Your Accountbrand in page title, not in the namefacebookform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Criticalsaberitsupport.comscore 66· active website
lure words (login, verify, secure…)supportpage impersonates a brandMicrosoft 365brand in page title, not in the namemicrosoftform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Criticalbgd77-mobile.comscore 63echoes tmobile· active website
brand spelled with digitsbgd77-mobile→tmobilebrand plus digitsbgd77-mobilebrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.+1 more

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Criticalv9betmobile.comscore 62echoes tmobile· active website
brand in the nametmobilebrand plus digitsv9betmobilebrand name behind Cloudflarecloudflare.comform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Criticalelvarnixtech.comscore 60· active website
page impersonates a brandMicrosoft 365brand in page title, not in the namemicrosoftform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Criticalpaidfollowers.comscore 60· active website
page impersonates a brandBinancebrand in page title, not in the nameinstagramform on a brand-styled pagehas_form

Model opinion: looks like a scam, confidence 62%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-09-08&tier=critical. Screenshots and the model's reasoning are on each domain's evidence page.