Flagged newborn domains, Tuesday, September 1, 2026

2,788 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumxrpera.orgscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumxto.chatscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Mediumyokel.sitescore 38· active website
brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”
Mediumyournexusos.comscore 38· redirects elsewhere
brand in page title, not in the name “microsoft”form on a brand-styled page “has_form”
Mediumytsub.proscore 38· active website
brand in page title, not in the name “instagram”form on a brand-styled page “has_form”
Mediumzebracob.onlinescore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
Mediumzellebot.comscore 38echoes zelle
brand in the name “zelle”brand name at a retail registrar “Atom.com Domains LLC”
Mediumzellemont.comscore 38echoes zelle
brand in the name “zelle”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumzellerox.comscore 38echoes zelle
brand in the name “zelle”brand name at a retail registrar “Name.com, Inc.”
Mediumzenixpro.onlinescore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumzigzaglk.shopscore 38· boilerplate page
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Mediumzimplichat.sitescore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
Mediumzwty.shopscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumaccount-forget.xyzscore 36· active website
lure words (login, verify, secure…) “account”TLD with a high abuse rate “xyz”page impersonates a brand “PayPal”
Mediumafpgovsupport.comscore 36· active website
lure words (login, verify, secure…) “support”page asks for credentials “verify your identity”
Mediumalppay.netscore 36echoes alipay
one-letter brand typo “alppay≈alipay”brand name at a retail registrar “Wix.com Ltd.”
Mediumamazin.digitalscore 36echoes amazon· no DNS
one-letter brand typo “amazin≈amazon”brand name at a retail registrar “Ultahost, Inc”
Mediumamazonassoftwarelab.shopscore 36echoes amazon· placeholder page
brand in the name “amazon”brand name behind Cloudflare “cloudflare.com”
Mediumandrej-cloud.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “IONOS SE”
Mediumbarcllays.comscore 36echoes barclays
one-letter brand typo “barcllays≈barclays”brand name at a retail registrar “UnstoppableUS2 LLC”
Mediumboisuke-cloud.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Amazon Registrar, Inc.”
Mediumcashbot.funscore 36· active website
TLD with a high abuse rate “fun”free DNS provider “dnsowl.com”brand in page title, not in the name “robinhood”
Mediumcenturion-strike.comscore 36echoes stripe
one-letter brand typo “strike≈stripe”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumcloud-ir.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Domain Science Kutatasi Szolgaltato Korl”
Mediumcloud-pinnacle.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Gandi SAS”
Mediumcooking.walesscore 36echoes booking· no DNS
one-letter brand typo “cooking≈booking”brand name at a retail registrar “Tucows Domains Inc.”
Mediumcoolermaster-mobile.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Domain Science Kutatasi Szolgaltato Korl”
Mediumcova-cloud.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Xin Net Technology Corporation”
Mediumdate-finance.onlinescore 36echoes binance· no DNS
one-letter brand typo “finance≈binance”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
Mediumdpbossofficial.sitescore 36· registrar placeholder
lure words (login, verify, secure…) “official”brand in page title, not in the name “hostinger”identical page on many newborns “104 identical pages”
Mediumfive-wchat.comscore 36echoes wechat
one-letter brand typo “wchat≈wechat”brand name at a retail registrar “Name.com, Inc.”
Mediumfreshbet-uk.casinoscore 36· active website
page impersonates a brand “PayPal”page pushes urgent payment “Claim Your Bonus”
Mediumgmailb.shopscore 36echoes gmail· no DNS
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”
Mediumhypernode-cloud.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “GoDaddy.com, LLC”
Mediuminternational-parcelnl-tracknl.infoscore 36· blocked the probe
lure words (login, verify, secure…) “parcel,track”very long name “30”brand in page title, not in the name “cloudflare”
Mediumjettbet.inkscore 36· active website
page impersonates a brand “PayPal”page pushes urgent payment “Claim your bonus”
Mediumkl-final-finance.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “InterNetX GmbH”
Mediumladada.sitescore 36echoes lazada· robots.txt denied
one-letter brand typo “ladada≈lazada”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
Mediumladada.storescore 36echoes lazada· no DNS
one-letter brand typo “ladada≈lazada”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
Mediumlimitedstock.shopscore 36· registrar placeholder
lure words (login, verify, secure…) “limited”brand in page title, not in the name “hostinger”identical page on many newborns “104 identical pages”
Mediumlinemedianews.shopscore 36echoes lineme· placeholder page
brand in the name “lineme”brand name behind Cloudflare “cloudflare.com”
Mediumlloyd-companies.comscore 36echoes lloyds
one-letter brand typo “lloyd≈lloyds”brand name at a retail registrar “Amazon Registrar, Inc.”
Mediummg-finance.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “OVH sas”
Mediummobile-darkroom.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Vautron Rechenzentrum AG”
Mediumnobio-cloud.appscore 36echoes icloud· active website
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Name.com, Inc.”
Mediumnorth-linee.comscore 36echoes lineme
one-letter brand typo “linee≈lineme”brand name at a retail registrar “Wix.com Ltd.”
Mediumnovara-finance.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “INWX GmbH”
Mediumoil98ws.lolscore 36· blocked the probe
TLD with a high abuse rate “lol”free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
Mediumpostnnl.comscore 36echoes postnl
one-letter brand typo “postnnl≈postnl”brand name at a retail registrar “DreamHost, LLC”
Mediumreevolut.comscore 36echoes revolut
one-letter brand typo “reevolut≈revolut”brand name at a retail registrar “SNAPNAMES 42, LLC”

Same data as JSON: /api/zone/risk?day=2026-09-01&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.