Flagged newborn domains, Saturday, October 31, 2026

2,379 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumcyber-cloud.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Namesnap LLC”
Mediumeast-of-eden-lordserial.camscore 36· active website
many hyphens “3”TLD with a high abuse rate “cam”page impersonates a brand “Netflix”
Mediumfwc-cloud.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Amazon Registrar, Inc.”
Mediumhifiswap-telegramwebapp.icuscore 36echoes telegram· not probed yet
brand in the name “telegram”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Mediumi-strips.comscore 36echoes stripe
one-letter brand typo “strips≈stripe”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumin-strips.comscore 36echoes stripe
one-letter brand typo “strips≈stripe”brand name at a retail registrar “GoDaddy.com, LLC”
Mediuminformatica-cloud.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “OVH sas”
Mediumkhbi67-fb-myshopify-com.storescore 36echoes shopify· not probed yet
brand in the name “shopify”many hyphens “3”brand plus digits “khbi67-fb-myshopify-com”brand name at a retail registrar “Namify Domains Inc”
Mediumkirin-mobile.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Mediumla-zara.comscore 36echoes lazada
one-letter brand typo “lazara≈lazada”brand name at a retail registrar “eNom, LLC”
Mediumlcloud-chck.comscore 36echoes icloud
one-letter brand typo “lcloud≈icloud”brand name at a retail registrar “TuringSign Inc. d/b/a Cosmotown”
Mediummep-cloud.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “TuringSign Inc. d/b/a Cosmotown”
Mediummercedes-audi-tesla-porsche.techscore 36echoes tesla· active website
ambiguous brand word “tesla”many hyphens “3”brand name at a retail registrar “Tucows Domains Inc.”form on a brand-styled page “has_form”
Mediummicroshoft.cloudscore 36echoes microsoft· active website
one-letter brand typo “microshoft≈microsoft”brand name at a retail registrar “OVH sas”
Mediummobile-ticketing.mobiscore 36echoes tmobile· no DNS
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Amazon Registrar, Inc.”
Mediummobile-ticketing.techscore 36echoes tmobile· no DNS
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Amazon Registrar, Inc.”
Mediummqypb.topscore 36· redirects elsewhere
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “tiktok”
Mediummyphoto-cloud.sitescore 36echoes icloud· active website
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
Mediumnatowest.comscore 36echoes natwest
one-letter brand typo “natowest≈natwest”brand name at a retail registrar “Register SPA”
Mediumngaer.topscore 36· redirects elsewhere
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “tiktok”
Mediumondrive.voyagescore 36echoes onedrive· active website
one-letter brand typo “ondrive≈onedrive”brand name at a retail registrar “Name.com, Inc.”
Mediumopen-data-finance.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “IONOS SE”
Mediumopenchatgpt.shopscore 36echoes chatgpt· not probed yet
brand in the name “chatgpt”brand name behind Cloudflare “cloudflare.com”
Mediumpeptides-strips.comscore 36echoes stripe· not probed yet
one-letter brand typo “strips≈stripe”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumprivacy-guard-mobile.comscore 36echoes tmobile· no web server
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “SNAPNAMES 78, LLC”
Mediumqianduoduo66.topscore 36· active website
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “google”
Mediumrml-cloud.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “IONOS SE”
Mediumspektrum-consulting.comscore 36echoes spectrum
one-letter brand typo “spektrum≈spectrum”brand name at a retail registrar “Squarespace Domains II LLC”
Mediumstar-stride.comscore 36echoes stripe
one-letter brand typo “stride≈stripe”brand name at a retail registrar “Wix.com Ltd.”
Mediumstarting-blox.comscore 36echoes starling
one-letter brand typo “starting≈starling”brand name at a retail registrar “OVH sas”
Mediumsterling-prophet.comscore 36echoes starling
one-letter brand typo “sterling≈starling”brand name at a retail registrar “IONOS SE”
Mediumstride-english.comscore 36echoes stripe
one-letter brand typo “stride≈stripe”brand name at a retail registrar “Wix.com Ltd.”
Mediumstrike-it-rich.comscore 36echoes stripe
one-letter brand typo “strike≈stripe”brand name at a retail registrar “Wix.com Ltd.”
Mediumstrips-peptides.comscore 36echoes stripe
one-letter brand typo “strips≈stripe”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumtelegrm.comscore 36echoes telegram
one-letter brand typo “telegrm≈telegram”brand name at a retail registrar “Inames Co., Ltd.”
Mediumtito-k.shopscore 36echoes tiktok· active website
one-letter brand typo “titok≈tiktok”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Mediumtot-finance.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Mediumttgap.topscore 36· redirects elsewhere
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “tiktok”
Mediumtwilo.sitescore 36echoes twilio· empty page
one-letter brand typo “twilo≈twilio”brand name at a retail registrar “Network Solutions, LLC”
Mediumvaultxsupport.xyzscore 36· active website
lure words (login, verify, secure…) “support”TLD with a high abuse rate “xyz”page impersonates a brand “MetaMask”
Mediumwkxrz.topscore 36· redirects elsewhere
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “tiktok”
Mediumwx-chat.comscore 36echoes wechat· no DNS
one-letter brand typo “wxchat≈wechat”brand name at a retail registrar “Dominet (HK) Limited”
Mediumxn--gmq6n010ai96apkdm3a37jj18a.topscore 35· no web server
punycode name “自媒体签约达人网 scripts=CJK”very long name “30”random-looking name “H=4.02”TLD with a high abuse rate “top”
Mediumxn--gmqp20a1j1a0wa5y98pdk2alus.topscore 35· no DNS
punycode name “自媒體簽約達人網 scripts=CJK”very long name “30”random-looking name “H=4.24”TLD with a high abuse rate “top”
punycode name “李子阳人彘小丑去死 scripts=CJK”very long name “31”random-looking name “H=4.12”TLD with a high abuse rate “icu”
Mediumbank-infoservice.momscore 34· blocked the probe
lure words (login, verify, secure…) “service”TLD with a high abuse rate “mom”brand in page title, not in the name “cloudflare”
Mediumbank-infoservice.xyzscore 34· blocked the probe
lure words (login, verify, secure…) “service”TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Mediumbigrewardssarecoming.xyzscore 34· active website
lure words (login, verify, secure…) “reward,rewards”TLD with a high abuse rate “xyz”login form “has_form+login words”
Mediumcustomeralienseo45.sbsscore 34· blocked the probe
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumhimasmm.shopscore 34· active website
page pushes urgent payment “claim your bonus”brand in page title, not in the name “instagram”

Same data as JSON: /api/zone/risk?day=2026-10-31&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.