Flagged newborn domains, Saturday, September 26, 2026

2,201 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumdropboxtrailers.comscore 30echoes dropbox· excluded
brand in the name “dropbox”
Mediumdtik-tok.infoscore 30echoes tiktok· no DNS
brand in the name “tiktok”
Mediumdudefilms.datescore 30· active website
TLD with a high abuse rate “date”page impersonates a brand “NetFlix”
Mediumdunloebay.comscore 30echoes ebay
brand in the name “ebay”
Mediumeazy-fidelity.comscore 30echoes fidelity
brand in the name “fidelity”
Mediumebayas.comscore 30echoes ebay
brand in the name “ebay”
Mediumeducoutlook.comscore 30echoes outlook
brand in the name “outlook”
Mediumelano-ltd.topscore 30· active website
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”page pushes urgent payment “risk-free”
Mediumelsa-vbg.orgscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “56 identical pages”
Mediumemilitary.sitescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “56 identical pages”
Mediumentra.sitescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “56 identical pages”
Mediumepicgames-week.storescore 30echoes epicgames· active website
brand in the name “epicgames”
Mediumerotikfilmsitesi2.bestscore 30· active website
page asks for credentials “Login to your account”
Mediumerwancloud.cyouscore 30· active website
TLD with a high abuse rate “cyou”page impersonates a brand “Netflix”
Mediumerwanyunjc.cyouscore 30· active website
TLD with a high abuse rate “cyou”page impersonates a brand “Netflix”
Mediumestimulacionparapeques.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “56 identical pages”
Mediumetsybetsy.comscore 30echoes etsy
brand in the name “etsy”
Mediumevenoutlook.comscore 30echoes outlook
brand in the name “outlook”
Mediumezzat.techscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “56 identical pages”
Mediumfacebookads.latscore 30echoes facebook· not probed yet
brand in the name “facebook”
Mediumfacebookads.sitescore 30echoes facebook· not probed yet
brand in the name “facebook”
Mediumfacebookmusiconline.comscore 30echoes facebook
brand in the name “facebook”
Mediumfairoutlook.comscore 30echoes outlook
brand in the name “outlook”
Mediumfazendobolsas.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “56 identical pages”
Mediumfedexkx.comscore 30echoes fedex
brand in the name “fedex”
Mediumfedexlh.comscore 30echoes fedex
brand in the name “fedex”
Mediumfedexmw.comscore 30echoes fedex
brand in the name “fedex”
Mediumfedexph.comscore 30echoes fedex
brand in the name “fedex”
Mediumfedexxg.comscore 30echoes fedex
brand in the name “fedex”
Mediumfedexxk.comscore 30echoes fedex
brand in the name “fedex”
Mediumfedexxm.comscore 30echoes fedex
brand in the name “fedex”
Mediumfedexxp.comscore 30echoes fedex
brand in the name “fedex”
Mediumfedexxy.comscore 30echoes fedex
brand in the name “fedex”
Mediumfedexyk.comscore 30echoes fedex
brand in the name “fedex”
Mediumfedexyp.comscore 30echoes fedex
brand in the name “fedex”
Mediumfedexyx.comscore 30echoes fedex
brand in the name “fedex”
Mediumfendajc.cfdscore 30· active website
TLD with a high abuse rate “cfd”page impersonates a brand “Netflix”
Mediumfinancialnewsoutlook.comscore 30echoes outlook
brand in the name “outlook”
Mediumfitness-medical-sahty-online.sitescore 30· active website
many hyphens “3”very long name “28”brand in page title, not in the name “namecheap”
Mediumflyinbird.sbsscore 30· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”
Mediumforagingadventure.storescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “56 identical pages”
Mediumfraudsantander.comscore 30echoes santander
brand in the name “santander”
Mediumfxmaster.ltdscore 30· active website
page asks for credentials “verify your identity”
Mediumgameearn.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “56 identical pages”
Mediumgendigitalgodaddy.comscore 30echoes godaddy
brand in the name “godaddy”
Mediumgetoliviastanghulu.comscore 30echoes hulu
brand in the name “hulu”
Mediumggstar.sbsscore 30· active website
TLD with a high abuse rate “sbs”page impersonates a brand “MetaMask”
Mediumgladicloud.comscore 30echoes icloud
brand in the name “icloud”
Mediumgodaddyagents.comscore 30echoes godaddy
brand in the name “godaddy”
Mediumgoldenbellecandlecoetsy.comscore 30echoes etsy
brand in the name “etsy”

Same data as JSON: /api/zone/risk?day=2026-09-26&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.