westernexpworkday.live
Appeared in the .live zone on Wednesday, October 21, 2026; by the end of that day the census found boilerplate page. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The name pairs 'westernexp' (likely Western Express) with 'workday', the shape of an employee Workday-login lure, but the page is only a Tucows expired/parking template (renewyourname.net nameservers, general-domainparking.com search links, no form). That makes it a brand-squat with no live deception rather than an active phish.
This is a parked domain with a brand-typosquat name (westernexpworkday.live combining 'Western Express' and 'Workday') displaying generic search-result boilerplate and domain-parking links. The page has no login form, no impersonation content, and no attempt to deceive visitors into providing credentials—it is a clear domain squat with commercial parking.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Wednesday, October 21, 2026
Same data as JSON: /api/zone/domain/westernexpworkday.live. This page is not indexed by search engines and does not link to the site it describes.