Flagged newborn domains, Sunday, August 30, 2026

214 names at tier low or above in .org, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalslackdaddy.orgscore 68echoes slack· active website
brand in the nameslackbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.+1 more

Model opinion: looks like abuse, confidence 88%. An opinion, not a finding.

Criticalxn--iptvleverantrer-ktb.orgscore 60· active website
punycode nameiptvleverantörer scripts=LATINpage impersonates a brandNetflixbrand in page title, not in the namewhatsapp

Model opinion: looks like abuse, confidence 92%. An opinion, not a finding.

Hightelegramgrup.orgscore 59echoes telegram· active website
brand in the nametelegrambrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.brand name and brand-styled pagetelegram

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Higheyesopenai.orgscore 55echoes openai· blocked the probe
brand in the nameopenaibrand name at a retail registrarGoDaddy.com, LLCform on a brand-styled pagehas_form
Highphelta-cloud.orgscore 55echoes icloud· registrar placeholder
one-letter brand typocloud≈icloudbrand name at a retail registrarIONOS SEform on a brand-styled pagehas_formidentical page on many newborns1073 identical pages

Model opinion: looks benign, confidence 94%. An opinion, not a finding.

Highxn--revolutionreinterventionen-saar-zvc.orgscore 55echoes revolut· registrar placeholder
punycode namerevolutionäreinterventionen-saar scriptsbrand in the namerevolutvery long name32brand name at a retail registrarIONOS SE+2 more

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highsd-finance.orgscore 54echoes binance· active website
one-letter brand typofinance≈binancebrand name at a retail registrarName.com, Inc.form on a brand-styled pagehas_form

Model opinion: looks benign, confidence 83%. An opinion, not a finding.

Highspotifyapk.orgscore 54echoes spotify· boilerplate page
brand in the namespotifybrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLCidentical page on many newborns1190 identical pages

Model opinion: looks like abuse (target: Spotify), confidence 72%. An opinion, not a finding.

Highspotifypro.orgscore 54echoes spotify· boilerplate page
brand in the namespotifybrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLCidentical page on many newborns1190 identical pages

Model opinion: looks like abuse (target: Spotify), confidence 68%. An opinion, not a finding.

Highstarlinktravel.orgscore 54echoes starlink· registrar placeholder
brand in the namestarlinkbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.identical page on many newborns3394 identical pages

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Hightelegramifsagruplari.orgscore 54echoes telegram· boilerplate page
brand in the nametelegrambrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLCidentical page on many newborns1190 identical pages

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highinnovationos.orgscore 44echoes ionos· robots.txt denied
brand in the nameionosbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highionosci.orgscore 44echoes ionos· active website
brand in the nameionosbrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highplannetflix.orgscore 44echoes netflix· not probed yet
brand in the namenetflixbrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highstarlinkinternationalacademy.orgscore 42echoes starlink· no web server
brand in the namestarlinkvery long name28brand name at a retail registrarPDR Ltd. d/b/a PublicDomainRegistry.com
Mediumzoom-pc.orgscore 39echoes zoom· active website
ambiguous brand wordzoombrand name behind Cloudflarecloudflare.combrand name at a retail registrarGname.com Pte. Ltd.brand name at a watch-list registrarGname.com Pte. Ltd.+1 more
Medium2002tii-restoration.orgscore 38· active website
brand in page title, not in the nametiktokform on a brand-styled pagehas_form
Mediumalcoglaze.orgscore 38· active website
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumamazonahealth.orgscore 38echoes amazon· empty page
brand in the nameamazonbrand name at a retail registrarTucows Domains Inc.
Mediumamazonbestseller.orgscore 38echoes amazon· no DNS
brand in the nameamazonbrand name at a retail registrarCSL Computer Service Langenbach GmbH d/b
Mediumdailyasianews.orgscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumendpointpilot.orgscore 38· active website
brand in page title, not in the namemicrosoftform on a brand-styled pagehas_form
Mediumepublishing.orgscore 38· redirects elsewhere
brand in page title, not in the nameamazonform on a brand-styled pagehas_form
Mediumguardiansonline.orgscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumhevbnnb.orgscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumjenstories.orgscore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumjudolbet88bumi.orgscore 38· active website
brand in page title, not in the namebookingform on a brand-styled pagehas_form
Mediummapswithteeth.orgscore 38· active website
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumpencollection.orgscore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumprintableblank.orgscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumrakutennews.orgscore 38echoes rakuten· placeholder page
brand in the namerakutenbrand name at a retail registrarSquarespace Domains II LLC
Mediumremeus.orgscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumrennes-slot-club.orgscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumtccentral.orgscore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumtgtop.orgscore 38· active website
brand in page title, not in the nametelegramform on a brand-styled pagehas_form
Mediumtwittervideodownloader.orgscore 38echoes twitter· blocked the probe
brand in the nametwitterbrand name at a retail registrarName.com, Inc.
Mediumvaccineresistanceleague.orgscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumzeonslotvip.orgscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumcarctrl.orgscore 30· active website
page asks for credentialsSign in to your account
Mediummyswissdental.orgscore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns46 identical pages
Mediumparivattan.orgscore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns46 identical pages
Mediumxn--mk1bz9a98g07qyzirqax3qszf.orgscore 27· active website
punycode name트립닷컴할인코드 scripts=HANGULvery long name29random-looking nameH=4.18
Mediummechanome-portal.orgscore 26· redirects elsewhere
lure words (login, verify, secure…)portalbrand in page title, not in the namecloudflare
Mediumroyalen-games.orgscore 25· no DNS
nameserver domain born the same daybacknorosi-gygy.com
Lowamplifyyourintuition.orgscore 24echoes intuit· boilerplate page
brand in the nameintuitidentical page on many newborns68 identical pages
Lowdyslexicintuitive.orgscore 24echoes intuit· boilerplate page
brand in the nameintuitidentical page on many newborns174 identical pages
Lowspaceformentalhealthresearch.orgscore 24· redirects elsewhere
very long name28brand in page title, not in the nameinstagram
Lowxn--bahademujer-qcb.orgscore 24· active website
punycode namebahíademujer scripts=LATINform submits over plain HTTPhttp://xn--bahademujer-qcb.org/
Lowfamilymealdeals.orgscore 22· active website
page impersonates a brandAmazon Prime
Lowlaudatosirevolution.orgscore 22echoes revolut· boilerplate page
brand in the namerevolutbrand name redirects elsewheredropcatch.com

Same data as JSON: /api/zone/risk?day=2026-08-30&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.