Flagged newborn domains, Saturday, September 19, 2026

10,568 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highroyalmail.workscore 50echoes royalmail· active website
brand in the nameroyalmailTLD with a high abuse rateworkbrand name at a retail registrarGname.com Pte. Ltd.brand name at a watch-list registrarGname.com Pte. Ltd.+1 more

Model opinion: looks like phishing (target: Royal Mail / Parcelforce Worldwide), confidence 98%. An opinion, not a finding.

Highsavedsgoogle.helpscore 50echoes google· no DNS
brand in the namegooglebrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highserviceshub.sitescore 50· active website
lure words (login, verify, secure…)service,servicesbrand in page title, not in the namewhatsappform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highslaintesaudadewhiskey.comscore 50echoes intesa· registrar placeholder
brand in the nameintesabrand name at a retail registrarIONOS SEform on a brand-styled pagehas_formidentical page on many newborns141 identical pages

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highspotifyzo.netscore 50echoes spotify
brand in the namespotifybrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highstephan-cloud.bidscore 50echoes icloud· no DNS
one-letter brand typocloud≈icloudTLD with a high abuse ratebidbrand name behind Cloudflarecloudflare.combrand name at a retail registrarCloudflare, Inc.
Highstriperguidetn.comscore 50echoes stripe
brand in the namestripebrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Hightaobo.buzzscore 50echoes taobao· not probed yet
one-letter brand typotaobo≈taobaoTLD with a high abuse ratebuzzbrand name behind Cloudflarecloudflare.combrand name at a retail registrarGoDaddy.com, LLC
Highthe1cloud-tiktokcdn.xyzscore 50echoes tiktok· not probed yet
brand in the nametiktokbrand plus digitsthe1cloud-tiktokcdnTLD with a high abuse ratexyzbrand name behind Cloudflarecloudflare.com+2 more
Highthe2cloud-tiktokcdn.xyzscore 50echoes tiktok· empty page
brand in the nametiktokbrand plus digitsthe2cloud-tiktokcdnTLD with a high abuse ratexyzbrand name behind Cloudflarecloudflare.com+2 more

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highthe3cloud-tiktokcdn.xyzscore 50echoes tiktok· not probed yet
brand in the nametiktokbrand plus digitsthe3cloud-tiktokcdnTLD with a high abuse ratexyzbrand name behind Cloudflarecloudflare.com+2 more
Highthe4cloud-tiktokcdn.xyzscore 50echoes tiktok· not probed yet
brand in the nametiktokbrand plus digitsthe4cloud-tiktokcdnTLD with a high abuse ratexyzbrand name behind Cloudflarecloudflare.com+2 more
Highthe5cloud-tiktokcdn.xyzscore 50echoes tiktok· not probed yet
brand in the nametiktokbrand plus digitsthe5cloud-tiktokcdnTLD with a high abuse ratexyzbrand name behind Cloudflarecloudflare.com+2 more
Hightheretirementoutlook.comscore 50echoes outlook
brand in the nameoutlookbrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.
Hightikitok.clickscore 50echoes tiktok· not probed yet
one-letter brand typotikitok≈tiktokTLD with a high abuse rateclickbrand name behind Cloudflarecloudflare.combrand name at a retail registrarRegistrar.eu
Hightiktokmodd.comscore 50echoes tiktok
brand in the nametiktokbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Hightrustwalllet.sbsscore 50echoes trustwallet· no DNS
one-letter brand typotrustwalllet≈trustwalletTLD with a high abuse ratesbsbrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITEDbrand name at a watch-list registrarNICENIC INTERNATIONAL GROUP CO., LIMITED
Highugxbox.picsscore 50echoes xbox· boilerplate page
brand in the namexboxbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc

Model opinion: suspicious, confidence 40%. An opinion, not a finding.

Highusa-axion.comscore 50echoes usaa
brand in the nameusaabrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highusa-axions.comscore 50echoes usaa
brand in the nameusaabrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highusa-axisearch.comscore 50echoes usaa· no DNS
brand in the nameusaabrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.
Highusa-axital.comscore 50echoes usaa
brand in the nameusaabrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc
Highusa-axitalent.comscore 50echoes usaa
brand in the nameusaabrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.
Highvanguardenvreports.comscore 50echoes vanguard
brand in the namevanguardbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highwalamart.sbsscore 50echoes walmart· active website
one-letter brand typowalamart≈walmartTLD with a high abuse ratesbsbrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.

Model opinion: looks like abuse (target: Walmart), confidence 72%. An opinion, not a finding.

Highwhatsappthing.comscore 50echoes whatsapp
brand in the namewhatsappbrand name behind Cloudflarecloudflare.combrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLC
Highworkspace-cloud.sbsscore 50echoes icloud· no DNS
one-letter brand typocloud≈icloudTLD with a high abuse ratesbsbrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITEDbrand name at a watch-list registrarNICENIC INTERNATIONAL GROUP CO., LIMITED
Highxyunjichang.lolscore 50· active website
TLD with a high abuse ratelolpage impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highxyunjichang.sbsscore 50· active website
TLD with a high abuse ratesbspage impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highxyunjichang.xyzscore 50· active website
TLD with a high abuse ratexyzpage impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highaichatgpt.websitescore 48echoes chatgpt· boilerplate page
brand in the namechatgptbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns3168 identical pages

Model opinion: looks like abuse (target: OpenAI (ChatGPT)), confidence 55%. An opinion, not a finding.

Highalexistogel-cloud.comscore 48echoes icloud
one-letter brand typocloud≈icloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.
Highamazonapwudriver.orgscore 48echoes amazon· boilerplate page
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns3168 identical pages

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highamazonapwudrivers.orgscore 48echoes amazon· boilerplate page
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns3168 identical pages

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highamazonapwufairwork.comscore 48echoes amazon· boilerplate page
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns618 identical pages

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highamazonapwufightforjobs.orgscore 48echoes amazon· boilerplate page
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns3168 identical pages

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Highamazonapwuguaranteedpay.orgscore 48echoes amazon· boilerplate page
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns3168 identical pages

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highamazonapwuhealthcare.orgscore 48echoes amazon· boilerplate page
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns3168 identical pages

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highamazonapwunegotiations.orgscore 48echoes amazon· boilerplate page
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns3168 identical pages

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highamazonapwuprotections.orgscore 48echoes amazon· boilerplate page
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns3168 identical pages

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highamazonapwuprotest.orgscore 48echoes amazon· boilerplate page
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns3168 identical pages

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highamazonapwurights.orgscore 48echoes amazon· boilerplate page
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns3168 identical pages

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highamazonapwusdrivers.orgscore 48echoes amazon· boilerplate page
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns3168 identical pages

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highamazonapwusfairpay.orgscore 48echoes amazon· boilerplate page
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns3168 identical pages

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highamazonapwusfairwork.orgscore 48echoes amazon· boilerplate page
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns3168 identical pages

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highamazonapwusfightforjobs.orgscore 48echoes amazon· boilerplate page
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns3168 identical pages

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Highamazonapwusguaranteedpay.orgscore 48echoes amazon· boilerplate page
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns3168 identical pages

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highamazonapwuslabor.orgscore 48echoes amazon· boilerplate page
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns3168 identical pages

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highamazonapwusnegotiations.orgscore 48echoes amazon· boilerplate page
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns3168 identical pages

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highamazonapwusprotections.orgscore 48echoes amazon· boilerplate page
brand in the nameamazonbrand name at a retail registrarGoDaddy.com, LLCidentical page on many newborns3168 identical pages

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-09-19&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.