Flagged newborn domains, Saturday, September 5, 2026

50 names at tier medium or above in .net, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalsuinsist.netscore 60· active website
page impersonates a brandPayPalbrand in page title, not in the namepaypalform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highalertuspsdeliveryattempt.netscore 55echoes usps
brand in the nameuspslure words (login, verify, secure…)alert,deliverybrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.

Model opinion: suspicious (target: USPS), confidence 72%. An opinion, not a finding.

Highalertuspsdeliveryattempted.netscore 55echoes usps
brand in the nameuspslure words (login, verify, secure…)alert,deliverybrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.

Model opinion: suspicious (target: USPS), confidence 72%. An opinion, not a finding.

Highalertuspsdeliverymissed.netscore 55echoes usps
brand in the nameuspslure words (login, verify, secure…)alert,deliverybrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.

Model opinion: suspicious (target: USPS), confidence 72%. An opinion, not a finding.

Highalertuspsmisseddelivery.netscore 55echoes usps
brand in the nameuspslure words (login, verify, secure…)alert,deliverybrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.

Model opinion: suspicious (target: USPS), confidence 72%. An opinion, not a finding.

Highbank0fameric-a-link.netscore 55echoes bankofamerica· placeholder page
brand spelled with digitsbank0fameric-a-link→bankofamericabrand plus digitsbank0fameric-a-linkbrand name on a rarely-seen nameserverkoddos.combrand name at a retail registrarPDR Ltd. d/b/a PublicDomainRegistry.com

Model opinion: looks like abuse (target: Bank of America), confidence 76%. An opinion, not a finding.

Highdocument-2cloud.netscore 55echoes icloud
one-letter brand typo2cloud≈icloudbrand plus digitsdocument-2cloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.+1 more

Model opinion: suspicious (target: Apple (iCloud)), confidence 72%. An opinion, not a finding.

Highfinalnoticeuspsdeliverymissed.netscore 55echoes usps
brand in the nameuspslure words (login, verify, secure…)deliveryvery long name29brand name behind Cloudflarecloudflare.com+1 more

Model opinion: suspicious (target: USPS), confidence 72%. An opinion, not a finding.

Hightrustwalletscard.netscore 55echoes trustwallet
brand in the nametrustwalletlure words (login, verify, secure…)walletbrand name at a retail registrarGlobal Domain Group LLC

Model opinion: suspicious (target: Trust Wallet), confidence 72%. An opinion, not a finding.

Highwordpress-help.netscore 55echoes wordpress
brand in the namewordpresslure words (login, verify, secure…)helpbrand name at a retail registrarGoDaddy.com, LLC

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highlocaluspsdeliveryattempted.netscore 54echoes usps
brand in the nameuspslure words (login, verify, secure…)deliverybrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.

Model opinion: suspicious (target: USPS), confidence 72%. An opinion, not a finding.

Highlocaluspsmisseddelivery.netscore 54echoes usps
brand in the nameuspslure words (login, verify, secure…)deliverybrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.

Model opinion: suspicious (target: USPS), confidence 72%. An opinion, not a finding.

Highnoticeuspsdeliverymissed.netscore 54echoes usps
brand in the nameuspslure words (login, verify, secure…)deliverybrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.

Model opinion: suspicious (target: USPS), confidence 72%. An opinion, not a finding.

Highnoticeuspsmisseddelivery.netscore 54echoes usps
brand in the nameuspslure words (login, verify, secure…)deliverybrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.

Model opinion: suspicious (target: USPS), confidence 72%. An opinion, not a finding.

Higholder-women-looking-for-younger-men.netscore 52echoes booking
one-letter brand typolooking≈bookingmany hyphens5very long name35brand name behind Cloudflarecloudflare.com+1 more
High92-strike.netscore 50echoes stripe· active website
one-letter brand typostrike≈stripebrand plus digits92-strikebrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.

Model opinion: looks benign, confidence 78%. An opinion, not a finding.

Highspotifypremiums.netscore 50echoes spotify
brand in the namespotifybrand name behind Cloudflarecloudflare.combrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLC
Highspotlify.netscore 48echoes spotify· robots.txt denied
one-letter brand typospotlify≈spotifybrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC
Hightiktokslot88aa.netscore 46echoes tiktok
brand in the nametiktokbrand plus digitstiktokslot88aabrand name at a retail registrarPDR Ltd. d/b/a PublicDomainRegistry.com
Highagicloud.netscore 44echoes icloud
brand in the nameicloudbrand name on a rarely-seen nameserverno-ip.combrand name at a retail registrarNo-IP Technologies, LLC
Highamazon-ai.netscore 44echoes amazon
brand in the nameamazonbrand name at a retail registrarAlibaba Cloud Computing Ltd. d/b/a HiChibrand name at a watch-list registrarAlibaba Cloud Computing Ltd. d/b/a HiChi
Highbest4buy.netscore 44echoes bestbuy
one-letter brand typobest4buy≈bestbuybrand plus digitsbest4buybrand name at a retail registrarDropCatch.com 887 LLC
Highchatgpt-codex-pets.netscore 44echoes chatgpt
brand in the namechatgptbrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLC
Highchatgpt-ipo.netscore 44echoes chatgpt
brand in the namechatgptbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highchatgpt-pets.netscore 44echoes chatgpt
brand in the namechatgptbrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLC
Highlaxmipatitravels.netscore 44· active website
brand in page title, not in the namebookingform on a brand-styled pagehas_formform submits over plain HTTPhttps://www.laxmipatitravels.net/
Hightelegram-jp.netscore 44echoes telegram
brand in the nametelegrambrand name behind Cloudflarecloudflare.combrand name at a retail registrarDominet (HK) Limited
Highbookwing.netscore 42echoes booking
one-letter brand typobookwing≈bookingbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Highfinance-kazakhstan.netscore 42echoes binance
one-letter brand typofinance≈binancebrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.
Highhob-cloud.netscore 42echoes icloud
one-letter brand typocloud≈icloudbrand name on a rarely-seen nameserverdigicertdns.combrand name at a retail registrarGoDaddy.com, LLC
Highmobile-world.netscore 42echoes tmobile
one-letter brand typomobile≈tmobilebrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highorganic-cloud-beats-hub.netscore 42echoes icloud
one-letter brand typocloud≈icloudmany hyphens3brand name at a retail registrarWix.com Ltd.
Mediumbiolacto.netscore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumbooknofees.netscore 38· redirects elsewhere
brand in page title, not in the namestripeform on a brand-styled pagehas_form
Mediumclipio.netscore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumfacebookdate.netscore 38echoes facebook· no DNS
brand in the namefacebookbrand name at a retail registrarJuly Name Limited
Mediumghgmail.netscore 38echoes gmail
brand in the namegmailbrand name at a retail registrarGoDaddy.com, LLC
Mediumgoogledjd.netscore 38echoes google· placeholder page
brand in the namegooglebrand name at a retail registrarSquarespace Domains LLC
Mediumhululs.netscore 38echoes hulu
brand in the namehulubrand name at a retail registrarGoDaddy.com, LLC
Mediumjp-shopee.netscore 38echoes shopee
brand in the nameshopeebrand name at a retail registrarName.com, Inc.
Mediumoutlookconsulting.netscore 38echoes outlook
brand in the nameoutlookbrand name at a retail registrarWix.com Ltd.
Mediumrakutenweekly.netscore 38echoes rakuten
brand in the namerakutenbrand name at a retail registrarGMO Internet Group, Inc. d/b/a Onamae.co
Mediumscarfacebook.netscore 38echoes facebook
brand in the namefacebookbrand name at a retail registrarGoDaddy.com, LLC
Mediumsoundfidelity.netscore 38echoes fidelity
brand in the namefidelitybrand name at a retail registrarTucows Domains Inc.
Mediumtratorpecas.netscore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumvanguardfemininebeauty.netscore 38echoes vanguard
brand in the namevanguardbrand name at a retail registrarWix.com Ltd.
Mediumvanguardgl.netscore 38echoes vanguard
brand in the namevanguardbrand name at a retail registrarGoDaddy.com, LLC
Mediumwordpressforyou.netscore 38echoes wordpress
brand in the namewordpressbrand name at a retail registrarGoDaddy.com, LLC
Mediumgen-finance.netscore 36echoes binance· placeholder page
one-letter brand typofinance≈binancebrand name at a retail registrarSquarespace Domains II LLC
Mediumhttpsalazarscleaningservices.netscore 36· blocked the probe
lure words (login, verify, secure…)service,servicesvery long name28brand in page title, not in the namecloudflare

Same data as JSON: /api/zone/risk?day=2026-09-05&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.