Flagged newborn domains, Friday, September 4, 2026

328 names at tier low or above in .org, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalgooglede.orgscore 77echoes google· active website
brand in the namegooglebrand name behind Cloudflarecloudflare.combrand name at a retail registrarKey-Systems GmbHbrand name and brand-styled pagegoogle+1 more

Model opinion: looks like phishing (target: Google), confidence 62%. An opinion, not a finding.

Criticallazadayupoo.orgscore 65echoes lazada· active website
brand in the namelazadabrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.+1 more

Model opinion: looks like abuse (target: Lazada), confidence 82%. An opinion, not a finding.

Highen-plan-cloud.orgscore 55echoes icloud· registrar placeholder
one-letter brand typocloud≈icloudbrand name at a retail registrarIONOS SEform on a brand-styled pagehas_formidentical page on many newborns1325 identical pages

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Hightrustwalletapp.orgscore 55echoes trustwallet· no DNS
brand in the nametrustwalletlure words (login, verify, secure…)walletbrand name on a rarely-seen nameservertrustname.combrand name at a retail registrarFewmoretaps OU d/b/a Trustname.com
Highnycvsamazon.orgscore 54echoes amazon· registrar placeholder
brand in the nameamazonbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.identical page on many newborns4352 identical pages

Model opinion: looks benign, confidence 83%. An opinion, not a finding.

Highprojectgoogle.orgscore 54echoes google· registrar placeholder
brand in the namegooglebrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.identical page on many newborns4352 identical pages

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highwinspiritau.orgscore 54echoes itau· registrar placeholder
brand in the nameitaubrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.identical page on many newborns4352 identical pages

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Hightaxgoogle.orgscore 53echoes google· active website
brand in the namegooglebrand name at a retail registrarSquarespace Domains LLCbrand name and brand-styled pagegoogle

Model opinion: suspicious (target: Google), confidence 56%. An opinion, not a finding.

High92-strike.orgscore 50echoes stripe· active website
one-letter brand typostrike≈stripebrand plus digits92-strikebrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.

Model opinion: looks benign, confidence 78%. An opinion, not a finding.

Highamazonjob.orgscore 50echoes amazon· no DNS
brand in the nameamazonbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highrabbibetsy.orgscore 48echoes etsy· boilerplate page
brand in the nameetsybrand name at a retail registrarWild West Domains, LLCidentical page on many newborns1534 identical pages

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highcomcast-net.orgscore 44echoes comcast· robots.txt denied
brand in the namecomcastbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highfacebook-ads.orgscore 44echoes facebook· no web server
brand in the namefacebookbrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highgoogle-image.orgscore 44echoes google· no web server
brand in the namegooglebrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highmaher-tracker.orgscore 44· redirects elsewhere
lure words (login, verify, secure…)trackbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highrobinhoodrooding.orgscore 44echoes robinhood· no DNS
brand in the namerobinhoodbrand name behind Cloudflarecloudflare.combrand name at a retail registrarTuringSign Inc. d/b/a Cosmotown
Highadeyinkaadebayogeneralhospital.orgscore 42echoes ebay· registrar placeholder
brand in the nameebayvery long name30brand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.+1 more

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highainance.orgscore 42echoes binance· parked, for sale
one-letter brand typoainance≈binancebrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highinsigniafiretv.orgscore 42· active website
page impersonates a brandNetflixbrand in page title, not in the nameamazon
Highpoogle.orgscore 42echoes google· no DNS
one-letter brand typopoogle≈googlebrand name behind Cloudflarecloudflare.combrand name at a retail registrarSquarespace Domains LLC
Highsharedsamples.orgscore 42· active website
page impersonates a brandMicrosoft 365brand in page title, not in the namemicrosoft
Hightrustwallct.orgscore 42echoes trustwallet· no DNS
one-letter brand typotrustwallct≈trustwalletbrand name behind Cloudflarecloudflare.combrand name at a retail registrarHosting Concepts B.V. d/b/a Registrar.eu
Highcampusrevolution.orgscore 40echoes revolut· blocked the probe
brand in the namerevolutbrand name at a retail registrarGoDaddy.com, LLCform on a brand-styled pagehas_form
Medium145235856.orgscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumallagenta.orgscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumamericanexpress-platinum.orgscore 38echoes americanexpress· active website
brand in the nameamericanexpressbrand name at a retail registrarLigne Web Services SAS dba LWS
Mediumbessboroughgroup.orgscore 38· active website
brand in page title, not in the namefacebookform on a brand-styled pagehas_form
Mediumbooknofees.orgscore 38· redirects elsewhere
brand in page title, not in the namestripeform on a brand-styled pagehas_form
Mediumcivicnewsstand.orgscore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumcliptik.orgscore 38· active website
brand in page title, not in the nametiktokform on a brand-styled pagehas_form
Mediumcounselorjulia.orgscore 38· redirects elsewhere
brand in page title, not in the namemicrosoftform on a brand-styled pagehas_form
Mediumdirectory-nigeria.orgscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumdisneythroughmyeyes.orgscore 38echoes disney· empty page
brand in the namedisneybrand name at a retail registrarTucows Domains Inc.
Mediumefodigitaldash.orgscore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediuminoiis.orgscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumlloydsmithgroup.orgscore 38echoes lloyds· no web server
brand in the namelloydsbrand name at a retail registrarGoDaddy.com, LLC
Mediumprofamr.orgscore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumprograma-cnh.orgscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumsem-dividas.orgscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumskillshifter.orgscore 38· active website
brand in page title, not in the namechatgptform on a brand-styled pagehas_form
Mediumsuccessmedsupphelp.orgscore 38· redirects elsewhere
brand in page title, not in the namemedicareform on a brand-styled pagehas_form
Mediumthailand-tomorrowland.orgscore 38· blocked the probe
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumtpaconnect.orgscore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumvanguardlogisticsltd.orgscore 38echoes vanguard· placeholder page
brand in the namevanguardbrand name at a retail registrarSquarespace Domains II LLC
Mediumviacivica.orgscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumvideocatch.orgscore 38· active website
brand in page title, not in the namefacebookform on a brand-styled pagehas_form
punycode namecodigoescondido19españa scripts=LATINbrand in page title, not in the namecloudflare
Mediumfinance-pilot.orgscore 36echoes binance· blocked the probe
one-letter brand typofinance≈binancebrand name at a retail registrarMainReg Inc.
Mediumwinspirit-au2.orgscore 36echoes itau· active website
brand in the nameitaubrand plus digitswinspirit-au2brand name behind Cloudflarecloudflare.combrand name at a retail registrarKey-Systems GmbH
Mediumcasinoarmada-officialsite.orgscore 34· blocked the probe
lure words (login, verify, secure…)officialfree DNS providerdnsowl.combrand in page title, not in the namecloudflare

Same data as JSON: /api/zone/risk?day=2026-09-04&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.