Flagged newborn domains, Saturday, September 26, 2026

2,201 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumcloud-stealth.xyzscore 36echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”
Mediumcloud-use.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”free DNS provider “dnsowl.com”
Mediumcoinbasehelpline.comscore 36echoes coinbase
brand in the name “coinbase”brand name behind Cloudflare “cloudflare.com”
Mediumdavidversusamazon.comscore 36echoes amazon
brand in the name “amazon”brand name behind Cloudflare “cloudflare.com”
Mediumdigitalmicrosoft.comscore 36echoes microsoft
brand in the name “microsoft”brand name on a rarely-seen nameserver “stableserver.net”
Mediumdomgazelle.studyscore 36echoes zelle· no DNS
brand in the name “zelle”brand name behind Cloudflare “cloudflare.com”
Mediumdrchill-cloud.xyzscore 36echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”
Mediumdrugstore-finance.xyzscore 36echoes binance· not probed yet
one-letter brand typo “finance≈binance”TLD with a high abuse rate “xyz”
Mediume-gmail.comscore 36echoes gmail
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”
Mediumencontrar-icloud-xm.helpscore 36echoes icloud· robots.txt denied
brand in the name “icloud”brand name on a rarely-seen nameserver “supvipdn.pro”
Mediumencontrar-icloud-ze.helpscore 36echoes icloud· robots.txt denied
brand in the name “icloud”brand name on a rarely-seen nameserver “supvipdn.pro”
Mediumencontrar-icloud-zi.helpscore 36echoes icloud· robots.txt denied
brand in the name “icloud”brand name on a rarely-seen nameserver “supvipdn.pro”
Mediumepimafrique-mobile.netscore 36echoes tmobile· robots.txt denied
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Squarespace Domains II LLC”
Mediumetsylisting.comscore 36echoes etsy
brand in the name “etsy”brand name behind Cloudflare “cloudflare.com”
Mediumexploit-cloud.xyzscore 36echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”
Mediumexploit-finance.xyzscore 36echoes binance· not probed yet
one-letter brand typo “finance≈binance”TLD with a high abuse rate “xyz”
Mediumexplorecloudflare.comscore 36echoes cloudflare
brand in the name “cloudflare”brand name behind Cloudflare “cloudflare.com”
Mediumfacehook.xyzscore 36echoes facebook· not probed yet
one-letter brand typo “facehook≈facebook”TLD with a high abuse rate “xyz”
Mediumfedexgd.comscore 36echoes fedex
brand in the name “fedex”brand name behind Cloudflare “cloudflare.com”
Mediumfinance-blackjack.xyzscore 36echoes binance· not probed yet
one-letter brand typo “finance≈binance”TLD with a high abuse rate “xyz”
Mediumfinance-dispensary.xyzscore 36echoes binance· not probed yet
one-letter brand typo “finance≈binance”TLD with a high abuse rate “xyz”
Mediumfinance-drugstore.xyzscore 36echoes binance· not probed yet
one-letter brand typo “finance≈binance”TLD with a high abuse rate “xyz”
Mediumfinance-exploit.xyzscore 36echoes binance· not probed yet
one-letter brand typo “finance≈binance”TLD with a high abuse rate “xyz”
Mediumfinance-jackpot.xyzscore 36echoes binance· not probed yet
one-letter brand typo “finance≈binance”TLD with a high abuse rate “xyz”
Mediumfinance-roulette.xyzscore 36echoes binance· not probed yet
one-letter brand typo “finance≈binance”TLD with a high abuse rate “xyz”
Mediumfinance-sensual.xyzscore 36echoes binance· not probed yet
one-letter brand typo “finance≈binance”TLD with a high abuse rate “xyz”
Mediumfinance-stealth.xyzscore 36echoes binance· not probed yet
one-letter brand typo “finance≈binance”TLD with a high abuse rate “xyz”
Mediumfinance.archiscore 36echoes binance· redirects elsewhere
one-letter brand typo “finance≈binance”brand name redirects elsewhere “free.voto”
Mediumfinance.democratscore 36echoes binance· redirects elsewhere
one-letter brand typo “finance≈binance”brand name redirects elsewhere “free.voto”
Mediumfinance.futbolscore 36echoes binance· redirects elsewhere
one-letter brand typo “finance≈binance”brand name redirects elsewhere “free.voto”
Mediumfinance.givesscore 36echoes binance· redirects elsewhere
one-letter brand typo “finance≈binance”brand name redirects elsewhere “free.voto”
Mediumfinance.irishscore 36echoes binance· redirects elsewhere
one-letter brand typo “finance≈binance”brand name redirects elsewhere “free.voto”
Mediumfinance.jetztscore 36echoes binance· redirects elsewhere
one-letter brand typo “finance≈binance”brand name redirects elsewhere “free.voto”
Mediumfinance.lightingscore 36echoes binance· redirects elsewhere
one-letter brand typo “finance≈binance”brand name redirects elsewhere “free.voto”
Mediumfinance.photosscore 36echoes binance· redirects elsewhere
one-letter brand typo “finance≈binance”brand name redirects elsewhere “free.voto”
Mediumfinance.reisenscore 36echoes binance· redirects elsewhere
one-letter brand typo “finance≈binance”brand name redirects elsewhere “free.voto”
Mediumfinance.republicanscore 36echoes binance· redirects elsewhere
one-letter brand typo “finance≈binance”brand name redirects elsewhere “free.voto”
Mediumfinance.taxiscore 36echoes binance· redirects elsewhere
one-letter brand typo “finance≈binance”brand name redirects elsewhere “free.voto”
Mediumfinance.votoscore 36echoes binance· redirects elsewhere
one-letter brand typo “finance≈binance”brand name redirects elsewhere “free.voto”
Mediumfinance.webcamscore 36echoes binance· redirects elsewhere
one-letter brand typo “finance≈binance”brand name redirects elsewhere “free.voto”
Mediumframebay.surfscore 36echoes ebay· no DNS
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”
Mediumglamspotify.orgscore 36echoes spotify· not probed yet
brand in the name “spotify”brand name behind Cloudflare “cloudflare.com”
Mediumgmailx.orgscore 36echoes gmail· not probed yet
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”
Mediumgmailxz.comscore 36echoes gmail
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”
Mediumgobankofamerica.comscore 36echoes bankofamerica
brand in the name “bankofamerica”brand name on a rarely-seen nameserver “bb-online.biz”
Mediumgooglekolkata.comscore 36echoes google
brand in the name “google”brand name behind Cloudflare “cloudflare.com”
Mediumgoogleworkspacemigration.netscore 36echoes google
brand in the name “google”brand name on a rarely-seen nameserver “awsdns-41.com”
Mediumhsbc-nio.comscore 36echoes hsbc
brand in the name “hsbc”brand name on a rarely-seen nameserver “hsbc.com”
Mediumhsbc-nio.orgscore 36echoes hsbc· no DNS
brand in the name “hsbc”brand name on a rarely-seen nameserver “hsbc.com”
Mediumhsbcnio.orgscore 36echoes hsbc· no DNS
brand in the name “hsbc”brand name on a rarely-seen nameserver “hsbc.com”

Same data as JSON: /api/zone/risk?day=2026-09-26&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.