Flagged newborn domains, Thursday, October 1, 2026

2,948 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumavel-finance.infoscore 36echoes binance· not probed yet
one-letter brand typo “finance≈binance”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumavel-finance.storescore 36echoes binance· not probed yet
one-letter brand typo “finance≈binance”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumboo-finance.comscore 36echoes binance· empty page
one-letter brand typo “finance≈binance”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumcanadapostsever.helpscore 36echoes canadapost· no DNS
brand in the name “canadapost”brand name behind Cloudflare “cloudflare.com”
Mediumchatgbt.asiascore 36echoes chatgpt· no DNS
one-letter brand typo “chatgbt≈chatgpt”brand name at a retail registrar “DNSPod, Inc.”
Mediumchef-finance.onlinescore 36echoes binance· empty page
one-letter brand typo “finance≈binance”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
Mediumchettiar-finance-private.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumcityfastdataservice.shopscore 36· registrar placeholder
lure words (login, verify, secure…) “service”brand in page title, not in the name “hostinger”identical page on many newborns “107 identical pages”
Mediumcloud-labs.appscore 36echoes icloud· parked with ads
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Gandi SAS”
Mediumcloud-native.codesscore 36echoes icloud· active website
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Name.com, Inc.”
Mediumcloud-unit.netscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Wix.com Ltd.”
Mediumdlsney-be.comscore 36echoes disney
one-letter brand typo “dlsney≈disney”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Mediumdlsney-hungary.comscore 36echoes disney
one-letter brand typo “dlsney≈disney”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Mediumetamask.comscore 36echoes metamask
one-letter brand typo “etamask≈metamask”brand name at a retail registrar “Gabia, Inc.”
Mediumfinance-god.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumfp-finance.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “Squarespace Domains II LLC”
Mediumglobalmacro-finance.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “OVH sas”
Mediumgogle.proscore 36echoes google· active website
one-letter brand typo “gogle≈google”brand name at a retail registrar “Automattic Inc.”
Mediumgootoku-mobile.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Squarespace Domains II LLC”
Mediumhellspin-mobile-app.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “URL Solutions, Inc.”
Mediumhellspin-mobile.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “URL Solutions, Inc.”
Mediumhs-lloyd.comscore 36echoes lloyds· robots.txt denied
one-letter brand typo “lloyd≈lloyds”brand name at a retail registrar “Squarespace Domains II LLC”
Mediuminstgram.orgscore 36echoes instagram· no DNS
one-letter brand typo “instgram≈instagram”brand name at a retail registrar “Tucows Domains Inc.”
Mediuminteso.proscore 36echoes intesa· active website
one-letter brand typo “inteso≈intesa”brand name at a retail registrar “OVH SAS”
Mediumlifeos-cloud.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Wix.com Ltd.”
Mediumlms-mobile.appscore 36echoes tmobile· no DNS
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Key-Systems LLC”
Mediummizuno-dent.comscore 36echoes mizuho
one-letter brand typo “mizuno≈mizuho”brand name at a retail registrar “DropCatch.com 944 LLC”
Mediummobile-mechanical-solutions.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “IONOS SE”
Mediummobile-rc.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “GoDaddy.com, LLC”
Mediummobile-watch.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Domain Science Kutatasi Szolgaltato Korl”
Mediumnefflix.livescore 36echoes netflix· not probed yet
one-letter brand typo “nefflix≈netflix”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumnetfelix.netscore 36echoes netflix
one-letter brand typo “netfelix≈netflix”brand name at a retail registrar “InterNetX GmbH”
Mediumnevc-cloud.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Xin Net Technology Corporation”
Mediumnfinity-calculator.comscore 36echoes xfinity
one-letter brand typo “nfinity≈xfinity”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumoak-finance.comscore 36echoes binance· boilerplate page
one-letter brand typo “finance≈binance”brand name at a retail registrar “RegistryGate GmbH”
lure words (login, verify, secure…) “parcel,track,tracking”many hyphens “3”very long name “43”TLD with a high abuse rate “icu”
Mediumomx-finance.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “Scaleway SAS”
Mediumopensi.hostscore 36echoes openai· no DNS
one-letter brand typo “opensi≈openai”brand name at a retail registrar “Xin Net Technology Corporation”
Mediumopensi.inkscore 36echoes openai· no DNS
one-letter brand typo “opensi≈openai”brand name at a retail registrar “DNSPod, Inc.”
Mediumopensi.pressscore 36echoes openai· not probed yet
one-letter brand typo “opensi≈openai”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumopensi.solutionsscore 36echoes openai· excluded
one-letter brand typo “opensi≈openai”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumopensi.teamscore 36echoes openai· no DNS
one-letter brand typo “opensi≈openai”brand name at a retail registrar “DNSPod, Inc.”
Mediumpostal-paknship.comscore 36echoes postnl
one-letter brand typo “postal≈postnl”brand name at a retail registrar “Name.com, Inc.”
Mediumprestigious-mobile-notary.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Squarespace Domains II LLC”
Mediumred-finance.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “RegistryGate GmbH”
Mediumreine-cloud.sitescore 36echoes icloud· active website
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Ligne Web Services SAS dba LWS”
Mediumrichcap-finance-private.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumsecurewallnetwork.onlinescore 36· active website
lure words (login, verify, secure…) “secure”page asks for credentials “sign in to your account”
Mediumshopeme.netscore 36echoes shopee
one-letter brand typo “shopeme≈shopee”brand name at a retail registrar “Squarespace Domains II LLC”
Mediumspektrum-natura.comscore 36echoes spectrum
one-letter brand typo “spektrum≈spectrum”brand name at a retail registrar “InterNetX GmbH”

Same data as JSON: /api/zone/risk?day=2026-10-01&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.