Flagged newborn domains, Saturday, September 26, 2026

9,661 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumibm-ng1-cloud.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand plus digits “ibm-ng1-cloud”
Mediumicloud-mac.comscore 36echoes icloud
brand in the name “icloud”brand name on a rarely-seen nameserver “ssdns.online”
Mediumidcloud.lolscore 36echoes icloud· no web server
one-letter brand typo “idcloud≈icloud”TLD with a high abuse rate “lol”
Mediumig-viewer.topscore 36· active website
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “instagram”
Mediumikloud.xyzscore 36echoes icloud· not probed yet
one-letter brand typo “ikloud≈icloud”TLD with a high abuse rate “xyz”
Mediumindesa.xyzscore 36echoes intesa· not probed yet
one-letter brand typo “indesa≈intesa”TLD with a high abuse rate “xyz”
Mediuminnovativewealthmgroupgmail.comscore 36echoes gmail
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”
Mediuminsta-story-viewer.topscore 36· active website
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “instagram”
Mediumjackpot-cloud.xyzscore 36echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”
Mediumjgvoge.clickscore 36· blocked the probe
TLD with a high abuse rate “click”free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
Mediumjrairbnb.comscore 36echoes airbnb
brand in the name “airbnb”brand name behind Cloudflare “cloudflare.com”
Mediumkakaoassets.onlinescore 36echoes kakao· not probed yet
brand in the name “kakao”brand name behind Cloudflare “cloudflare.com”
Mediumkrakn.xyzscore 36echoes kraken· not probed yet
one-letter brand typo “krakn≈kraken”TLD with a high abuse rate “xyz”
Mediumkubank.xyzscore 36echoes nubank· not probed yet
one-letter brand typo “kubank≈nubank”TLD with a high abuse rate “xyz”
Mediumlazara.xyzscore 36echoes lazada· not probed yet
one-letter brand typo “lazara≈lazada”TLD with a high abuse rate “xyz”
Mediumlmapa-icloud.comscore 36echoes icloud· empty page
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”
Mediumlsuporte-icloud.comscore 36echoes icloud
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”
Mediumlsupport-apple.comscore 36echoes apple
ambiguous brand word “apple”lure words (login, verify, secure…) “support”brand name behind Cloudflare “cloudflare.com”
Mediumlukicloud.latscore 36echoes icloud· no DNS
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”
Mediummartinezgmail.comscore 36echoes gmail
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”
Mediummetflix.xyzscore 36echoes netflix· not probed yet
one-letter brand typo “metflix≈netflix”TLD with a high abuse rate “xyz”
Mediummicro-finance.xyzscore 36echoes binance· robots.txt denied
one-letter brand typo “finance≈binance”TLD with a high abuse rate “xyz”
Mediummicrosaft.xyzscore 36echoes microsoft· empty page
one-letter brand typo “microsaft≈microsoft”TLD with a high abuse rate “xyz”
Mediummicrosoft-onedrive.orgscore 36echoes microsoft· no web server
brand in the name “microsoft”brand name behind Cloudflare “cloudflare.com”
Mediummssgmail.comscore 36echoes gmail· no DNS
brand in the name “gmail”brand name on a rarely-seen nameserver “deverence.com”
Mediumn1iptv.shopscore 36· active website
page impersonates a brand “Netflix”page pushes urgent payment “Limited Time Offer”
Mediumnetflix-france.comscore 36echoes netflix
brand in the name “netflix”brand name on a rarely-seen nameserver “69host.cc”
Mediumnetflixcazino.comscore 36echoes netflix
brand in the name “netflix”brand name behind Cloudflare “cloudflare.com”
Mediumnexflix.funscore 36echoes netflix· active website
one-letter brand typo “nexflix≈netflix”TLD with a high abuse rate “fun”
Mediumnicofree-cloud.xyzscore 36echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”
Mediumnio-hsbc.comscore 36echoes hsbc
brand in the name “hsbc”brand name on a rarely-seen nameserver “hsbc.com”
Mediumnio-hsbc.orgscore 36echoes hsbc· no DNS
brand in the name “hsbc”brand name on a rarely-seen nameserver “hsbc.com”
Mediumniohsbc.comscore 36echoes hsbc
brand in the name “hsbc”brand name on a rarely-seen nameserver “hsbc.com”
Mediumniohsbc.orgscore 36echoes hsbc· no DNS
brand in the name “hsbc”brand name on a rarely-seen nameserver “hsbc.com”
Mediumnulltraces.topscore 36· active website
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “robinhood”
Mediumofficialnutrastore.shopscore 36· registrar placeholder
lure words (login, verify, secure…) “official”brand in page title, not in the name “hostinger”identical page on many newborns “56 identical pages”
Mediumomsconsulting-mail.comscore 36echoes gmail
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”
Mediumonedrivecloud.netscore 36echoes onedrive
brand in the name “onedrive”brand name behind Cloudflare “cloudflare.com”
Mediumonedriveshare.netscore 36echoes onedrive
brand in the name “onedrive”brand name behind Cloudflare “cloudflare.com”
Mediumopenaicalls.comscore 36echoes openai
brand in the name “openai”brand name behind Cloudflare “cloudflare.com”
Mediumpaypalactivity.comscore 36echoes paypal
brand in the name “paypal”brand name behind Cloudflare “cloudflare.com”
Mediumplay-oficial.topscore 36· active website
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “google”
Mediumplayloja.sbsscore 36· active website
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”brand in page title, not in the name “google”
Mediumplayoficialapp.topscore 36· active website
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “google”
Mediumprotec-ticket-shopify.comscore 36echoes shopify
brand in the name “shopify”brand name behind Cloudflare “cloudflare.com”
Mediumqafexaebay.sitescore 36echoes ebay· robots.txt denied
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”
Mediumraceforeggsroblox.wikiscore 36echoes roblox· active website
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”
Mediumraketen.xyzscore 36echoes rakuten· not probed yet
one-letter brand typo “raketen≈rakuten”TLD with a high abuse rate “xyz”
Mediumreportertelegram.comscore 36echoes telegram
brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”
Mediumrevolut-ch.comscore 36echoes revolut
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”

Same data as JSON: /api/zone/risk?day=2026-09-26&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.