Flagged newborn domains, Wednesday, October 7, 2026

9,487 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumweb-3q-ledgers.onlscore 36echoes ledger· no DNS
one-letter brand typo “ledgers≈ledger”brand plus digits “web-3q-ledgers”
Mediumwebcentral-whatsapp.comscore 36echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”
Mediumwebcloudpro-whatsapp.comscore 36echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”
Mediumwebline-whatsapp.comscore 36echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”
Mediumwebnetwork-whatsapp.comscore 36echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”
Mediumwebonlinepro-whatsapp.comscore 36echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”
Mediumwebpoint-whatsapp.comscore 36echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”
Mediumwebspace-whatsapp.comscore 36echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”
Mediumwebstartpro-whatsapp.comscore 36echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”
Mediumwebsystem-whatsapp.comscore 36echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”
Mediumwellsfargoceolive.comscore 36echoes wellsfargo
brand in the name “wellsfargo”brand name behind Cloudflare “cloudflare.com”
Mediumwellsfargomobileassist.helpscore 36echoes wellsfargo· blocked the probe
brand in the name “wellsfargo”brand name behind Cloudflare “cloudflare.com”
Mediumwenken-whatsapp.comscore 36echoes whatsapp
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”
Mediumwhatsapp-demo.appscore 36echoes whatsapp· not probed yet
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”
Mediumwhiteway-coinbase.comscore 36echoes coinbase
brand in the name “coinbase”brand name behind Cloudflare “cloudflare.com”
Mediumwordpresshost.websitescore 36echoes wordpress· not probed yet
brand in the name “wordpress”brand name behind Cloudflare “cloudflare.com”
Mediumworkdayweightloss.infoscore 36echoes workday· active website
brand in the name “workday”brand name behind Cloudflare “cloudflare.com”
Mediumwpsdropbox.proscore 36echoes dropbox· no DNS
brand in the name “dropbox”brand name behind Cloudflare “cloudflare.com”
Mediumzlot-mobile.vipscore 36echoes tmobile· active website
brand in the name “tmobile”brand name behind Cloudflare “cloudflare.com”
Mediumkasai-steam.comscore 35echoes steam· redirects elsewhere
ambiguous brand word “steam”brand name at a retail registrar “Domain Science Kutatasi Szolgaltato Korl”brand name and brand-styled page “steam”brand name redirects elsewhere “expireddomains.com”
Mediumthevanguardnoble.comscore 35echoes vanguard· active website
brand in the name “vanguard”brand name on a rarely-seen nameserver “claudpodserver.com”brand name and brand-styled page “vanguard”
Mediumxn--12c2bcij0cna7kwapb8kwefm.xyzscore 35· no DNS
punycode name “การเริ่มต้นที่ดี scripts=THAI”very long name “28”random-looking name “H=4.06”TLD with a high abuse rate “xyz”
punycode name “全球数字资产权属标识 scripts=CJK”very long name “37”random-looking name “H=4.15”TLD with a high abuse rate “xyz”
Medium1xbet-casino-login.cfdscore 34· blocked the probe
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cfd”brand in page title, not in the name “cloudflare”
Medium1xbet-casino-login.sbsscore 34· blocked the probe
lure words (login, verify, secure…) “login”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumalign-finance.comscore 34echoes binance
one-letter brand typo “finance≈binance”brand name on a rarely-seen nameserver “ch-dns.net”
Mediumalixpay.devscore 34echoes alipay· no DNS
one-letter brand typo “alixpay≈alipay”brand name behind Cloudflare “cloudflare.com”
Mediumancloteridgeinvestmentsgmail.comscore 34echoes gmail
brand in the name “gmail”very long name “28”
Mediumazino-mobile.proscore 34echoes tmobile· not probed yet
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”
Mediumbetflix-register.comscore 34echoes netflix
one-letter brand typo “betflix≈netflix”brand name behind Cloudflare “cloudflare.com”
Mediumblacktop-mobile-auto-repair.comscore 34echoes tmobile
one-letter brand typo “mobile≈tmobile”many hyphens “3”
Mediumboros-finance.asiascore 34echoes binance· boilerplate page
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”
Mediumbumperaccountpierce58.sbsscore 34· blocked the probe
lure words (login, verify, secure…) “account”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumcloud-lines-shows.comscore 34echoes icloud
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”
Mediumcloud-rhythm.comscore 34echoes icloud
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”
Mediumcrypstral-finance.comscore 34echoes binance
one-letter brand typo “finance≈binance”brand name on a rarely-seen nameserver “v-sys.org”
Mediumdiesel-cloud.comscore 34echoes icloud
one-letter brand typo “cloud≈icloud”brand name on a rarely-seen nameserver “nameself.com”
Mediumfedexfreightholdingcompanyinc.comscore 34echoes fedex
brand in the name “fedex”very long name “29”
Mediumfinance-tourradar.comscore 34echoes binance
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”
Mediumfinance-united-group.proscore 34echoes binance· not probed yet
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”
Mediumflexi-finance.comscore 34echoes binance
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”
Mediumgoogleadsensesepaisekaisekamaye.casascore 34echoes google· active website
brand in the name “google”very long name “31”
Mediumhalk-finance.netscore 34echoes binance
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”
Mediumhome-cloud.fyiscore 34echoes icloud· robots.txt denied
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”
Mediumhostitnger.comscore 34echoes hostinger
one-letter brand typo “hostitnger≈hostinger”brand name behind Cloudflare “cloudflare.com”
Mediumlendzi-finance.comscore 34echoes binance
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”
Mediumlinkedln-jobs.netscore 34echoes linkedin
one-letter brand typo “linkedln≈linkedin”brand name behind Cloudflare “cloudflare.com”
Mediummedicar.plusscore 34echoes medicare· empty page
one-letter brand typo “medicar≈medicare”brand name behind Cloudflare “cloudflare.com”
Mediummizuro.onlinescore 34echoes mizuho· empty page
one-letter brand typo “mizuro≈mizuho”brand name behind Cloudflare “cloudflare.com”
Mediummobile-jamuslot.babyscore 34echoes tmobile· robots.txt denied
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”

Same data as JSON: /api/zone/risk?day=2026-10-07&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.