Flagged newborn domains, Thursday, October 29, 2026

9,579 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumreal-food-cooking.comscore 36echoes booking
one-letter brand typo “cooking≈booking”brand name at a retail registrar “Wix.com Ltd.”
Mediumrobinwood-homes.comscore 36echoes robinhood
one-letter brand typo “robinwood≈robinhood”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumrobloxxxxxxmaxert.shopscore 36echoes roblox· empty page
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”
Mediumroxblox.netscore 36echoes roblox
one-letter brand typo “roxblox≈roblox”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumshopifo.comscore 36echoes shopify
one-letter brand typo “shopifo≈shopify”brand name at a retail registrar “DropCatch.com 992 LLC”
Mediumsloty-booking.comscore 36echoes booking· active website
ambiguous brand word “booking”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”form on a brand-styled page “has_form”
Mediumstarking-industry.netscore 36echoes starling
one-letter brand typo “starking≈starling”brand name at a retail registrar “Xiamen 35.com Information Co., Ltd.”
Mediumstrip.worksscore 36echoes stripe· excluded
one-letter brand typo “strip≈stripe”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumstrpe.orgscore 36echoes stripe· robots.txt denied
one-letter brand typo “strpe≈stripe”brand name at a retail registrar “Squarespace Domains II LLC”
Mediumsuslik-cloud.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Tucows Domains Inc.”
Mediumtaobac.cloudscore 36echoes taobao· no DNS
one-letter brand typo “taobac≈taobao”brand name at a retail registrar “P.A Viet Nam Company Limited”
Mediumtaobac.comscore 36echoes taobao
one-letter brand typo “taobac≈taobao”brand name at a retail registrar “P.A. Viet Nam Company Limited”
Mediumtaobiao.vipscore 36echoes taobao· no DNS
one-letter brand typo “taobiao≈taobao”brand name at a retail registrar “Chengdu West Dimension Digital Technolog”
Mediumtech-for-finance.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumtestnov17paypal1.comscore 36echoes paypal
brand in the name “paypal”brand plus digits “testnov17paypal1”brand name on a rarely-seen nameserver “ipage.com”brand name at a retail registrar “Domain.com - Network Solutions, LLC”
Mediumtfhjgh.sbsscore 36· active website
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
Mediumtfuyhk.sbsscore 36· active website
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
Mediumthalia-finance.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “Infomaniak Network SA”
Mediumthevcdfdsf.boatsscore 36· active website
TLD with a high abuse rate “boats”free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
Mediumthinq-mobile.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumthinq-mobile.onlinescore 36echoes tmobile· excluded
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumthinq-mobile.storescore 36echoes tmobile· excluded
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumtikook.comscore 36echoes tiktok
one-letter brand typo “tikook≈tiktok”brand name at a retail registrar “Dominet (HK) Limited”
Mediumtiktokael.appscore 36echoes tiktok· empty page
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”
Mediumtthbjnkl.sbsscore 36· active website
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
Mediumtyjknjhj.sbsscore 36· active website
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
Mediumunlocker.hostscore 36· registrar placeholder
lure words (login, verify, secure…) “unlock”brand in page title, not in the name “hostinger”identical page on many newborns “74 identical pages”
Mediumvanguardsystems.appscore 36echoes vanguard· no DNS
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”
Mediumvanguart.netscore 36echoes vanguard
one-letter brand typo “vanguart≈vanguard”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumwhatsappnext.appscore 36echoes whatsapp· server error
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”
Mediumwojtech-cloud.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumworkday-jobs.comscore 36echoes workday
brand in the name “workday”brand name on a rarely-seen nameserver “markmonitor.com”
Mediumxn--mcrosft-7ya3c.comscore 36echoes microsoft· no DNS
punycode name “mícrosòft scripts=LATIN”brand in the name “microsoft”brand name at a retail registrar “Tucows Domains Inc.”
Mediumyu-bank.comscore 36echoes nubank
one-letter brand typo “yubank≈nubank”brand name at a retail registrar “Dominet (HK) Limited”
Mediumxn--cvqs3l73fg7p1ixymcw73bb6d.topscore 35· no DNS
punycode name “小綿羊單身俱樂部 scripts=CJK”very long name “29”random-looking name “H=4.18”TLD with a high abuse rate “top”
Mediumxn--czr123cd1e4zc20xc6wo0gmme.topscore 35· no DNS
punycode name “特色養殖產銷電商 scripts=CJK”very long name “29”random-looking name “H=3.94”TLD with a high abuse rate “top”
Mediumxn--fjq92bn4ek9lk37btzaw88eb6d.topscore 35· no DNS
punycode name “小绵羊单身俱乐部 scripts=CJK”very long name “30”random-looking name “H=4.28”TLD with a high abuse rate “top”
Mediumxn--gmq6n010aj96a2jd0a70j65kow1b.topscore 35· no web server
punycode name “自媒体网红达人签约 scripts=CJK”very long name “32”random-looking name “H=4.03”TLD with a high abuse rate “top”
punycode name “自媒體網紅達人簽約 scripts=CJK”very long name “33”random-looking name “H=4.14”TLD with a high abuse rate “top”
punycode name “羅斯威爾所長的大肥魚 scripts=CJK”very long name “34”random-looking name “H=4.14”TLD with a high abuse rate “top”
punycode name “罗斯威尔所长的大肥鱼 scripts=CJK”very long name “35”random-looking name “H=4.21”TLD with a high abuse rate “top”
Mediumxn--vhqt0ztpb01mkjgbk6b6k6abop.topscore 35· no DNS
punycode name “奶龙职业技术学院 scripts=CJK”very long name “30”random-looking name “H=3.97”TLD with a high abuse rate “top”
punycode name “特色养殖产销电商 scripts=CJK”very long name “31”random-looking name “H=4.05”TLD with a high abuse rate “top”
Mediumcoin-index-cost-compare-app.topscore 34echoes costco· active website
brand in the name “costco”many hyphens “4”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Mediumcoin-index-cost-compare.topscore 34echoes costco· not probed yet
brand in the name “costco”many hyphens “3”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Mediumdeutscherbonus.sbsscore 34· blocked the probe
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediuminvoicetoexcel.xyzscore 34· active website
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”brand in page title, not in the name “quickbooks”
Mediummegabonusnz.sbsscore 34· blocked the probe
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumnovawalletclaim.livescore 34· active website
lure words (login, verify, secure…) “claim,wallet”page impersonates a brand “MetaMask”
Mediumopeni.appscore 34echoes openai· no DNS
one-letter brand typo “openi≈openai”brand name behind Cloudflare “cloudflare.com”

Same data as JSON: /api/zone/risk?day=2026-10-29&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.