Flagged newborn domains, Sunday, November 1, 2026

7,024 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumeser.networkscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “36 identical pages”
Mediumexclusiveofferstore.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “36 identical pages”
Mediumfilley.techscore 30· active website
page asks for credentials “Log in to your account”
Mediumfixitadvice.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “36 identical pages”
Mediumgovia.sitescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “36 identical pages”
Mediumharvestvalley.funscore 30· active website
TLD with a high abuse rate “fun”page impersonates a brand “MetaMask”
Mediumhealthnatural.shopscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “36 identical pages”
Mediumhendra.techscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “36 identical pages”
Mediumhomemsedutor.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “36 identical pages”
Mediumhubspot-sync.appscore 30echoes hubspot· excluded
brand in the name “hubspot”
Mediumhvacguide.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “36 identical pages”
Mediumhyperballelysium.xyzscore 30· active website
TLD with a high abuse rate “xyz”page impersonates a brand “MetaMask”
Mediumhyperlaunch.cfdscore 30· active website
TLD with a high abuse rate “cfd”page impersonates a brand “MetaMask”
Mediumhyperloud.storescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “36 identical pages”
Mediumitsnov26.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “36 identical pages”
Mediumkoferzakonstelacije.shopscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “36 identical pages”
Mediumkonstelatzia.shopscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “36 identical pages”
Mediumlazadaz.shopscore 30echoes lazada· no DNS
brand in the name “lazada”
Mediumleebahtee.cfdscore 30· active website
TLD with a high abuse rate “cfd”page impersonates a brand “PayPal”
Mediumlesterlitvm.xyzscore 30· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Coinbase”
Mediumlocaladvice.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “36 identical pages”
Mediumlokal62gg2.spacescore 30· active website
page asks for credentials “Login to your Account”
Mediumlokal62gg3.storescore 30· active website
page asks for credentials “Login to your Account”
Mediummagiiakids.shopscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “36 identical pages”
Mediummagna-shiya.cloudscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “36 identical pages”
Mediummavelyra.proscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “36 identical pages”
Mediummaxvendas.digitalscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “36 identical pages”
Mediummetsy.shopscore 30echoes etsy· not probed yet
brand in the name “etsy”
Mediummidstockglobal.xyzscore 30· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Coinbase”
Mediummyjuvenon.wikiscore 30· active website
free DNS provider “dnsowl.com”page impersonates a brand “Paypal”
Mediumonlyfoolsandhorses.clubscore 30· active website
page asks for credentials “login to your account”
Mediumpayvra.appscore 30· active website
page asks for credentials “Sign in to your account”
Mediumpbvps.onlinescore 30· active website
page asks for credentials “Sign in to your account”
Mediumpriolebanking.onlinescore 30· active website
page asks for credentials “Sign in to your account”
Mediumsafefunds.workscore 30· active website
TLD with a high abuse rate “work”page impersonates a brand “MetaMask”
Mediumsafuhands.funscore 30· active website
TLD with a high abuse rate “fun”page impersonates a brand “Binance”
Mediumsbafraud.winscore 30· active website
TLD with a high abuse rate “win”page impersonates a brand “Wells Fargo”
Mediumshinyhunters.xyzscore 30· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Coinbase”
Mediumsprig.lolscore 30· active website
TLD with a high abuse rate “lol”page impersonates a brand “MetaMask”
Mediumterminalscanner.xyzscore 30· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Binance”
Mediumtribun118baik.onlinescore 30· active website
page asks for credentials “Login to your Account”
Mediumv6fun.xyzscore 30· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Netflix”
Mediumvaultinepro.onlinescore 30· active website
page asks for credentials “verify your identity”
Mediumwinlag.orgscore 30· active website
page asks for credentials “Sign in to your account”
Mediumxagent.vipscore 30· active website
free DNS provider “dnsowl.com”page impersonates a brand “MetaMask”
Medium0tv1.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Medium0x90.streamscore 28· active website
TLD with a high abuse rate “stream”brand in page title, not in the name “steam”
Medium123321h.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Medium17js.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Medium18mf.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”

Same data as JSON: /api/zone/risk?day=2026-11-01&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.